Skip to content
Noroxi

ProfilePress records

5 published records for vendor profilepress.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2019-15115
    35Monitor

    The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF.

    HighCVSS 8.8No exploitEPSS 1%

    profilepress · loginwpAug 16, 2019

  • CVE-2021-24954
    24Monitor

    ProfilePress < 3.2.3 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    profilepress · user registration\, login form\, user profile \& membershipDec 13, 2021

  • CVE-2021-24955
    24Monitor

    ProfilePress < 3.2.3 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    profilepress · user registration\, login form\, user profile \& membershipDec 13, 2021

  • CVE-2016-10925
    24Monitor

    The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.

    MediumCVSS 6.1No exploitEPSS 1%

    profilepress · loginwpAug 22, 2019

  • CVE-2021-24939
    24Monitor

    LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    profilepress · loginwpDec 6, 2021