Profilepress

9 CVEs across 3 Profilepress products. Browse Profilepress vulnerabilities, severities, and proof-of-concept exploits.

Profilepress products with known CVEs

ProductCVEs
Profilepress4
Loginwp3
User Registration\, Login Form\, User Profile \& Membership2
Profilepress CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-24955Medium6.12021-12-13The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not escape the data parameter of the pp_get_forms_by_builder_ty…
CVE-2021-24954Medium6.12021-12-13The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not sanitise and escape the ppress_cc_data parameter before out…
CVE-2021-24939Medium6.12021-12-06The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter befor…
CVE-2021-34624Critical9.82021-07-07A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users…
CVE-2021-34623Critical9.82021-07-07A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possible for use…
CVE-2021-34622Critical9.82021-07-07A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfilePress WordPress plugin made it possible…
CVE-2021-34621Critical9.82021-07-07A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible f…
CVE-2016-10925Medium6.12019-08-22The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.
CVE-2019-15115High8.82019-08-16The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.