Medium
CVE-2024-3210
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 52
Reset filters
Medium
CVE-2024-1535
ProfilePress <= 4.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1806
ProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile Shortcode
Medium
CVE-2024-1409
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via [reg-select-role] Shortcode
Medium
CVE-2024-1408
ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via [edit-profile-text-box] shortcode
Medium
CVE-2024-1519
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1570
ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1046
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44150
ProfilePress <= 4.13.2 - Information Disclosure via Debug Log
Medium
CVE-2023-41953
ProfilePress <= 4.13.1 Cross-Site Request Forgery via 'admin_notice'
High
CVE-2023-41954
ProfilePress <= 4.13.1 - Limited Privilege Escalation via 'acceptable_defined_roles'
Medium
041e635a-9f97-4f54-8ecb-57bbbc321cfc
ProfilePress <= 4.10.3 - Reflected Cross-Site Scripting via error message
High
CVE-2022-47444
ProfilePress <= 4.5.3 - Unauthenticated Cross-Site Scripting
High
CVE-2023-23830
ProfilePress <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-23820
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23996
ProfilePress <= 4.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4698
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings
Medium
CVE-2022-4697
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45083
ProfilePress <= 4.3.2 - Authenticated (Admin+) PHP Object Injection
Medium
e532a2b4-0fb4-4256-89a9-435b55d9de91
WordPress Membership, User Registration, Login Form, User Profile & Restrict Content Plugin – ProfilePress <= 3.2.15 - Reflected Cross-Site Scripting
Medium
CVE-2021-24954
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting via ppress_cc_data Parameter
Medium
CVE-2021-24955
ProfilePress <= 3.2.2 - Reflected Cross-Site Scripting
High
CVE-2021-24522
Paid Membership, User Registration, User Profile & Restrict Content Plugin – ProfilePress <= 3.1.10 - Unauthenticated Cross-Site Scripting
Critical
CVE-2021-34622
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.