CVE-2026-123659: medium-severity vulnerability in ProfilePress
ProfilePress < 4.17.6 - Unauthenticated Member Directory Role Restriction Bypass and User Meta Disclosure
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 0.3%
The ProfilePress WordPress plugin before 4.17.6 does not restrict the role and user meta filters its member directories accept to those configured by the administrator, allowing unauthenticated users to list accounts a directory was set to hide and to recover user meta values of listed users.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Unknown · ProfilePresspublic PoCs found — 1
cve_referencewpscan.com/vulnerability/01d27477-0971-4ca7-a285-39e81c3df648/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — ProfilePress
In the same product, most dangerous first.
CVE-2026-19848MEDIUMProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display NameEPSS 0.3%CVE-2026-123657MEDIUMProfilePress < 4.17.6 - Unauthenticated Inactive Membership Plan Enrollment via Negative Plan IDEPSS 0.2%CVE-2026-123661MEDIUMProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change CheckoutEPSS 0.2%CVE-2026-123656MEDIUMProfilePress < 4.17.6 - Unauthenticated Restricted Content Disclosure via REST APIEPSS 0.2%