Exposure of ProfilePress

WordPress plugins
53
exposure score
13,249
sites use
0
exploited
5
critical

CVEs

15 results
CVE-2021-34621CRITICALProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege EscalationEPSS 68.9%CVE-2021-34624CRITICALProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader ComponentEPSS 7.8%CVE-2021-34622CRITICALProfilePress 3.0 - 3.1.3 - Authenticated Privilege EscalationEPSS 4.9%CVE-2021-34623CRITICALProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader ComponentEPSS 2.1%CVE-2023-41954HIGHWordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerabilityEPSS 1.4%CVE-2026-66047CRITICALProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCEEPSS 0.9%CVE-2023-50882MEDIUMWordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-23996MEDIUMWordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)EPSS 0.5%CVE-2023-23820MEDIUMWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-23830HIGHWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-41953MEDIUMWordPress ProfilePress plugin <= 4.13.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-19848MEDIUMProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display NameEPSS 0.3%CVE-2026-41556MEDIUMWordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96337MEDIUMWordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-96518MEDIUMWordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerabilityEPSS 0.2%