Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content 4.15.20 Clear all filters
TI-2024-12169 CVE-2024-13121 · GHSA-268p-8m6q-3rq7

Paid Membership Plugin < 4.15.20 - Admin+ Stored XSS

Priority MEDIUM 50

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privile…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00379 Published 2025-02-13 Fixed in 4.15.20 CWE-79
TI-2024-12168 CVE-2024-13120 · GHSA-rx48-9x9v-rpp3

ProfilePress < 4.15.20 - Admin+ Stored XSS

Priority MEDIUM 55

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privile…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00371 Published 2025-02-13 Fixed in 4.15.20 CWE-79
TI-2024-12167 CVE-2024-13119 · GHSA-6622-jq7q-2394

ProfilePress < 4.15.20 - Admin+ Stored XSS

Priority MEDIUM 55

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.20 does not sanitise and escape some of its settings, which could allow high privile…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00423 Published 2025-02-13 Fixed in 4.15.20 CWE-79