Read the docs

ProfilePress

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ProfilePress records in CISA KEV

No ProfilePress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Loginwp 3 records LOW User Registration, Login Form, User Profile & Membership 2 records LOW

Records

3 records in Loginwp · all components

TI-2021-07218 CVE-2021-24939 · GHSA-8rq5-r7hg-52gr

LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting

Priority LOW 29

The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin page, leadin…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-12-06 Fixed in 3.0.0.5 CWE-79
Open these records in search →