9.8
Critique
CVE-2021-34624 A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress…
Description
A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. .
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ProfilePress | Versions non publiées | |
| ProfilePress 3.0 | 3.0.0 → 3.1.3 | Pas de correctif indiqué |
Autres CVE de ProfilePress
Les 7 CVE de ProfilePress →
CVE-2023-41953
Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from…
5.3
Moyenne
CVE-2023-50882
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly…
5.3
Moyenne
CVE-2024-9947
The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including,…
8.1
Élevée
CVE-2021-34621
A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the…
9.8
Critique