Skip to content
OpenAdvisories
Medium · 6.6 CVE-2022-45083 EUVD-2022-48004GHSA-cf3h-vjg3-v2hx

WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection

Published Jan 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ProfilePress Membership Team Product: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress

Description

Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress: from n/a through 4.3.2.

Affected products

VendorProductAffectedFixed
ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress ≤ 4.3.2 —

References