Iniciar sesión
Deutsch English Español Polski
Alta

Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting

  • Publicada: 09.08.2021
  • Actualizado: 11.10.2026 10:22

The User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before 3.1.11's widget for tabbed login/register was not properly escaped and could be used in an XSS attack which could lead to wp-admin access. Further, the plugin in several places assigned $_POST as $_GET which meant that in some cases this could be replicated with just $_GET parameters and no need for $_POST values.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

PlataformaPaqueteVersiones vulnerablesCorregida en
Plugin de WordPress Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 3.1.10 3.1.11

Referencias

Puntuación CVSS 7.2/10
Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Debilidad (CWE)
CWE-79
Plataforma
WordPress
Paquete
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Publicada
09.08.2021
Actualizado
11.10.2026 10:22

Fuentes y licencias

Wordfence Intelligence - 684253b3-0a96-4822-84c8-bde8ed45f35e - Wordfence Intelligence

Copyright 1999-2026 The MITRE Corporation

Copyright 2012-2026 Defiant Inc.

This record contains material that is subject to copyright

Copyright 1999-2026 The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

https://www.cve.org/Legal/TermsOfUse
Copyright 2012-2026 Defiant Inc.

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Wordfence Intelligence
Wordfence Intelligence - Defiant, Inc.
Copyright Defiant, Inc. All rights reserved except as granted below.
License grant, section 3.1 of the Wordfence Intelligence Terms and Conditions (January 26, 2026):

Subject to this Agreement, Company hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Service. Any copy you make for such purposes is authorized provided that you reproduce Company’s copyright designation, this license, and the license of any disclosed Company licensor in any such copy.

Full applicable Agreement: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/

Historial de vulnerabilidades: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress

Todas las vulnerabilidades publicadas de este paquete (Plugin de WordPress), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (52) en el archivo
Entradas en total
52
Primera → última
06.2021 10.2026
Sin corrección
0
Explotada en ataques
0

Distribución por gravedad

  • Crítica 5
  • Alta 11
  • Media 36

Divulgaciones por año

Gravedad:
  1. Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Sensitive Information Exposure via Shortcode Injection via Nickname and Biographical Info Profile Fields
    Alta · 8.8 CVE-2026-92536 <= 4.17.4 4.17.5
  2. Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'eup_bio' Biography Field (Entity-Encoded Shortcode Bracket)
    Alta · 8.1 CVE-2026-85658 <= 4.17.2 4.17.3
  3. Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.17.1 - Unauthenticated Arbitrary Plugin Installation via Brute Force
    Alta · 8.1 CVE-2026-66047 <= 4.17.1 4.17.2
  4. Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution
    Alta · 7.3 CVE-2026-19848 < 4.17.1 4.17.1
  5. Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.18 - Authenticated (Author+) Limited Unsafe File Upload via upload_mimes Filter Expansion
    Alta · 8.8 CVE-2026-13352 <= 4.16.18 4.16.19
  6. ProfilePress <= 4.16.17 - Unauthenticated Privilege Escalation
    Crítica · 9.8 CVE-2026-12497 <= 4.16.17 4.16.18
  7. Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.11 - Missing Authorization to Authenticated (Subscriber+) Membership Payment Bypass
    Alta · 7.1 CVE-2026-3445 <= 4.16.11 4.16.12
  8. ProfilePress <= 4.16.11 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Subscription Cancellation/Expiration
    Alta · 8.1 CVE-2026-3453 <= 4.16.11 4.16.12
  9. ProfilePress <= 4.13.1 - Limited Privilege Escalation via 'acceptable_defined_roles'
    Alta · 7.3 CVE-2023-41954 < 4.13.2 4.13.2
  10. ProfilePress <= 4.5.3 - Unauthenticated Cross-Site Scripting
    Alta · 7.2 CVE-2022-47444 <= 4.5.3 4.5.4
  11. ProfilePress <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
    Alta · 7.2 CVE-2023-23830 <= 4.5.4 4.5.5
  12. Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting esta entrada
    Alta · 7.2 CVE-2021-24522 <= 3.1.10 3.1.11
  13. ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
    Crítica · 9.8 CVE-2021-34622 >= 3.0.0, <= 3.1.3 3.1.4
  14. ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload
    Crítica · 9.8 CVE-2021-34624 >= 3.0.0, <= 3.1.3 3.1.4
  15. User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
    Crítica · 9.8 CVE-2021-34621 >= 3.0.0, <= 3.1.3 3.1.4
  16. User Registration, User Profiles, Login & Membership – ProfilePress (Formerly WP User Avatar) 3.0.0 - 3.1.3 - Unauthenticated Privilege Escalation
    Crítica · 9.8 CVE-2021-34623 >= 3.0.0, <= 3.1.3 3.1.4

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación
Newsletter DockRay

La seguridad de tus aplicaciones en tu correo

Vulnerabilidades importantes, recomendaciones concretas y consejos prácticos para tus aplicaciones. Elige tus tecnologías y sigue lo que importa para tu proyecto.

  • Un resumen diario de nuevas vulnerabilidades, también las críticas.
  • Avisos sobre actualizaciones importantes.
  • Consejos prácticos sobre seguridad y monitorización de aplicaciones.

Déjalo vacío para recibir avisos de todas las tecnologías.

Política de privacidad

Suscripción gratuita. Date de baja con un clic en cualquier correo.