Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content 4.15.15 Clear all filters
TI-2024-09742 CVE-2024-10518 · GHSA-j4cm-37xq-935g

ProfilePress < 4.15.15 - Admin+ Stored XSS

Priority MEDIUM 55

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.15 does not sanitise and escape some of its Membership Plan settings, which could al…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00414 Published 2024-12-12 Fixed in 4.15.15 CWE-79
TI-2024-09741 CVE-2024-10517 · GHSA-rhjp-3r26-6vqh

ProfilePress < 4.15.15 - Admin+ Stored XSS

Priority MEDIUM 55

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.15 does not sanitise and escape some of its Drag & Drop Builder fields, which could…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00414 Published 2024-12-12 Fixed in 4.15.15 CWE-79