agentprime: profilepressEvery new CVE for profilepress.https://agentprime.io/CVE-2026-123659: ProfilePress < 4.17.6 - Unauthenticated Member Directory Role Restriction Bypass and User Meta Disclosurehttps://agentprime.io/advisories/CVE-2026-123659/https://agentprime.io/advisories/CVE-2026-123659/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Nov 2026 07:33:08 GMTCVECVE-2026-123661: ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change Checkouthttps://agentprime.io/advisories/CVE-2026-123661/https://agentprime.io/advisories/CVE-2026-123661/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Nov 2026 06:00:13 GMTCVECVE-2026-123657: ProfilePress < 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment via Negative Plan IDhttps://agentprime.io/advisories/CVE-2026-123657/https://agentprime.io/advisories/CVE-2026-123657/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Nov 2026 06:00:12 GMTCVECVE-2026-123656: ProfilePress < 4.17.6 - Unauthenticated Restricted Content Disclosure via REST APIhttps://agentprime.io/advisories/CVE-2026-123656/https://agentprime.io/advisories/CVE-2026-123656/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Nov 2026 06:00:12 GMTCVECVE-2026-19848: ProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display Namehttps://agentprime.io/advisories/CVE-2026-19848/https://agentprime.io/advisories/CVE-2026-19848/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 11:40:43 GMTCVECVE-2023-41953: WordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2023-41953/https://agentprime.io/advisories/CVE-2023-41953/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Dec 2024 13:16:49 GMTCVECVE-2023-41954: WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2023-41954/https://agentprime.io/advisories/CVE-2023-41954/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 May 2024 06:54:21 GMTCVECVE-2023-23830: WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)https://agentprime.io/advisories/CVE-2023-23830/https://agentprime.io/advisories/CVE-2023-23830/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 May 2023 15:15:27 GMTCVECVE-2023-23820: WordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)https://agentprime.io/advisories/CVE-2023-23820/https://agentprime.io/advisories/CVE-2023-23820/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 May 2023 12:39:08 GMTCVECVE-2023-23996: WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)https://agentprime.io/advisories/CVE-2023-23996/https://agentprime.io/advisories/CVE-2023-23996/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Apr 2023 07:46:40 GMTCVECVE-2021-34624: ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Componenthttps://agentprime.io/advisories/CVE-2021-34624/https://agentprime.io/advisories/CVE-2021-34624/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jul 2021 12:21:21 GMTCVEcriticalCVE-2021-34621: ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalationhttps://agentprime.io/advisories/CVE-2021-34621/https://agentprime.io/advisories/CVE-2021-34621/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.69 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jul 2021 12:21:16 GMTCVEcriticalCVE-2021-34623: ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Componenthttps://agentprime.io/advisories/CVE-2021-34623/https://agentprime.io/advisories/CVE-2021-34623/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jul 2021 12:21:10 GMTCVEcriticalCVE-2021-34622: ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalationhttps://agentprime.io/advisories/CVE-2021-34622/https://agentprime.io/advisories/CVE-2021-34622/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jul 2021 12:20:58 GMTCVEcritical