Medium · 5.3 CVE-2023-41953 EUVD-2023-46412GHSA-g82v-73f7-4w62

WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerability

Published Dec 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1.

Vendor	Product	Affected	Fixed
ProfilePress Membership Team	ProfilePress	≤ 4.13.1	—