Known vulnerabilities in properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-104003 | The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to,… | 5.4 Medium | Oct 16, 2026 |
| CVE-2026-92536 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 8.8 High | Oct 3, 2026 |
| CVE-2026-92551 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.1 Medium | Oct 3, 2026 |
| CVE-2026-85658 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 8.1 High | Sep 19, 2026 |
| CVE-2026-18385 | The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 5.4 Medium | Aug 16, 2026 |
| CVE-2026-13352 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 8.8 High | Jul 17, 2026 |
| CVE-2026-4949 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 4.3 Medium | Apr 15, 2026 |
| CVE-2026-3309 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.5 Medium | Apr 4, 2026 |
| CVE-2026-3445 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 7.1 High | Apr 4, 2026 |
| CVE-2026-3453 | The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… | 8.1 High | Mar 11, 2026 |
| CVE-2025-13642 | ProfilePress <= 4.16.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution | 5.4 Medium | Dec 9, 2025 |
| CVE-2025-8878 | The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.5 Medium | Aug 16, 2025 |
| CVE-2024-11083 | The ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… | 5.3 Medium | Nov 27, 2024 |
| CVE-2024-2861 | The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ProfilePress User Panel… | 6.4 Medium | May 23, 2024 |
| CVE-2024-2867 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.4 Medium | May 2, 2024 |
| CVE-2024-3210 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.4 Medium | Apr 10, 2024 |
| CVE-2024-1806 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1409 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1535 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.4 Medium | Mar 13, 2024 |
| CVE-2024-1408 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.4 Medium | Feb 20, 2024 |
| CVE-2024-1570 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.4 Medium | Feb 20, 2024 |
| CVE-2024-1519 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.5 Medium | Feb 20, 2024 |
| CVE-2024-1046 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content –… | 6.4 Medium | Feb 5, 2024 |
| CVE-2022-4697 | The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 5.5 Medium | Dec 23, 2022 |
| CVE-2022-4698 | The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions… | 5.5 Medium | Dec 23, 2022 |
Other properfraction products
ProfilePress 8
kk Star Ratings – Rate Post & Collect User Feedbacks 3
MailOptin 3
MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. 2
CrawlWP SEO 1
CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor 1
Rate My Post – Star Rating Plugin by FeedbackWP 1