9.8
Critical
CVE-2021-34624 A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress…
Description
A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. .
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ProfilePress | Versions not published | |
| ProfilePress 3.0 | 3.0.0 → 3.1.3 | No fix stated |
Other CVEs of ProfilePress
The 7 CVEs of ProfilePress →
CVE-2023-41953
Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from…
5.3
Medium
CVE-2023-50882
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly…
5.3
Medium
CVE-2024-9947
The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including,…
8.1
High
CVE-2021-34621
A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the…
9.8
Critical