CVE-2026-41556 Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions

Description

Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
ProfilePress 4.16	premières → 4.16.13	Pas de correctif indiqué

Autres CVE de ProfilePress

Les 8 CVE de ProfilePress →

CVE-2026-96518 Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly… 5.9 Moyenne CVE-2026-96337 Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly… 6.5 Moyenne CVE-2023-50882 Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly… 5.3 Moyenne CVE-2021-34624 A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress… 9.8 Critique