Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress, 04cbc31982e559c0f908f31b4dcd9a19e12a7464

CVE, Research URL: 04cbc31982e559c0f908f31b4dcd9a19e12a7464
Home page URL: Security reports for Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Application: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Published on: Jun 26, 2023
Research Description: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress [wp-user-avatar] < 4.11.0 WordPress ProfilePress Plugin < 4.11.0 is vulnerable to Cross Site Scripting (XSS) Update the WordPress ProfilePress plugin to the latest available version (at least 4.11.0). Unknown discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress ProfilePress Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 4.11.0.
Affected versions: max 4.11.0.
Status: vulnerable

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &amp; Restrict Content – ProfilePress, 04cbc31982e559c0f908f31b4dcd9a19e12a7464