Properfraction ProfilePress vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Properfraction ProfilePress: 3 record(s), with affected versions and fixes.
CVE-2026-96518
Medium · 5.9
CWE-862 Oct 9, 2026
WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.
CVE-2026-96337
Medium · 6.5
CWE-862 Oct 9, 2026
WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.
CVE-2026-41556
Medium · 6.5
CWE-79 Jun 15, 2026
WordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.