Advisories · Technology

properfraction ProfilePress.

Every CVE that names properfraction ProfilePress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119473 CVE record

CVSS 4.3 Medium

WordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerability
- properfraction ProfilePress
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2026
CVE-2026-39733 CVE record

CVSS 5.3 Medium

WordPress ProfilePress plugin <= 4.17.7 - Content Injection vulnerability
- properfraction ProfilePress
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2026
CVE-2026-96337 CVE record

CVSS 6.5 Medium

WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
- properfraction ProfilePress
- Broken access control
Not analysed yet 9 Oct 2026
CVE-2026-96518 CVE record

CVSS 5.9 Medium

WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
- properfraction ProfilePress
- Broken access control
Not analysed yet 9 Oct 2026
CVE-2026-41556 CVE record

CVSS 6.5 Medium

WordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerability
- properfraction ProfilePress
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2026
CVE-2023-50882 CVE record

CVSS 5.3 Medium

WordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerability
- properfraction ProfilePress
- Broken access control
Not analysed yet 9 Dec 2024