Vulnerabilities

TI-2025-04106 CVE-2025-4593 · GHSA-826h-79qr-w724

WP Register Profile With Shortcode <= 3.6.2 - Authenticated (Contributor+) Sensitive Information Exposure

LOW 29

The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'rp_user_data' shortcode.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00318 Published 2025-07-11 No fix listed CWE-200

TI-2024-04232 CVE-2024-4546 · GHSA-c5vr-p874-p6pc

Cross-site scripting in avimegladon Custom Post Type Attachment

LOW 28

The Custom Post Type Attachment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pdf_attachment' shortcode in all versions up to, and including, 3.4.5 due to insufficient input sanitiza…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00273 Published 2024-05-16 No fix listed CWE-79

Vulnerabilities

Filters

WP Register Profile With Shortcode <= 3.6.2 - Authenticated (Contributor+) Sensitive Information Exposure

Cross-site scripting in avimegladon Custom Post Type Attachment