Known vulnerabilities in properfraction ProfilePress
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-96337 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly… | 6.5 Medium | Oct 9, 2026 |
| CVE-2026-96518 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly… | 5.9 Medium | Oct 9, 2026 |
| CVE-2026-41556 | Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions | 6.5 Medium | Jun 15, 2026 |
| CVE-2023-50882 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly… | 5.3 Medium | Dec 9, 2024 |
| CVE-2021-34624 | A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress… | 9.8 Critical | Jul 7, 2021 |
| CVE-2021-34621 | A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the… | 9.8 Critical | Jul 7, 2021 |
| CVE-2021-34623 | A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress… | 9.8 Critical | Jul 7, 2021 |
| CVE-2021-34622 | A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the… | 9.8 Critical | Jul 7, 2021 |
Other properfraction products
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 25
kk Star Ratings – Rate Post & Collect User Feedbacks 3
MailOptin 3
MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. 2
CrawlWP SEO 1
CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor 1
Rate My Post – Star Rating Plugin by FeedbackWP 1