Skip to content
OpenAdvisories
High · 7.1 CVE-2022-47444 EUVD-2022-50206GHSA-m5gq-rxm3-279g

WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)

Published Mar 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ProfilePress Membership Team Product: Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin <= 4.5.3 versions.

Affected products

VendorProductAffectedFixed
ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress ≤ 4.5.3 —

References