Skip to content
OpenAdvisories

Vendor

avimegladon

3 known vulnerabilities.

Products

WP Register Profile With Shortcode 2 Custom Post Type Attachment 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-5448

    WP Register Profile With Shortcode <= 3.5.9 - Cross-Site Request Forgery to User Password Reset

    The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.9. This is due to missing or incorrect nonce validation on the update_password_validate function. This makes it possi…

    avimegladon WP Register Profile With Shortcode Web / CMS