Medium · 5.9 CVE-2023-23818 EUVD-2023-27904GHSA-682v-v4hm-9r6v

WordPress WP Register Profile With Shortcode Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

Published Jun 12, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Aviplugins.Com WP Register Profile With Shortcode plugin <= 3.5.7 versions.

Vendor	Product	Affected	Fixed
Aviplugins.com	WP Register Profile With Shortcode	≤ 3.5.7	—