Skip to content
OpenAdvisories
High · 7.5 CVE-2023-44150 EUVD-2023-48509GHSA-vmpx-77rh-vj42

WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure

Published Nov 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ProfilePress Membership Team Product: Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress: from n/a through 4.13.2.

Affected products

VendorProductAffectedFixed
ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress ≤ 4.13.2 —

References