Skip to content
OpenAdvisories

Product · Proper Fraction

ProfilePress

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-119473

    WordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction ProfilePress wp-user-avatar allows Code Injection.This issue affects ProfilePress: from n/a through 4.17.7.

    Proper Fraction ProfilePress
  • Medium 5.3
    CVE-2026-39733

    WordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction ProfilePress wp-user-avatar allows Code Injection.This issue affects ProfilePress: from n/a through 4.17.7.

    Proper Fraction ProfilePress
  • Medium 5.9
    CVE-2026-96518

    WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.

    Proper Fraction ProfilePress
  • Medium 6.5
    CVE-2026-96337

    WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.

    Proper Fraction ProfilePress
  • Medium 6.5
    CVE-2026-41556

    WordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.

    Proper Fraction ProfilePress
  • Medium 5.3
    CVE-2023-50882

    WordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through <= 4.13.2.

    Proper Fraction ProfilePress