Vendor
Proper Fraction
42 known vulnerabilities.
Products
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 25
ProfilePress 7
MailOptin 3
MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. 2
kk Star Ratings – Rate Post & Collect User Feedbacks 2
CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor 1
CrawlWP SEO 1
Rate My Post – Star Rating Plugin by FeedbackWP 1
42 results · Feed
-
Medium 5.5
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_user_cover_default_image_url’ parameter in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible f…
-
Medium 5.5
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings
The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, …