[■] Plugin de WordPress

ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

60 expedientes en el radar

Comprueba tu versión de ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content Sólo las que se están explotando

[■] Registro

Vulnerabilidades (60)

4,3 Media

CVE-2026-123661: falta de autorización en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-123661

T−3d 11 nov. 2026
5,3 Media

CVE-2026-123656: falta de autorización en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-123656

T−3d 11 nov. 2026
5,3 Media

CVE-2026-123657: falta de autorización en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-123657

T−3d 11 nov. 2026
7,3 Alta

CVE-2026-39733: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-39733

T−7d 7 nov. 2026
5,4 Media

CVE-2026-119473: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-119473

T−7d 7 nov. 2026
5,4 Media

CVE-2026-104003: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-104003

T−29d 15 oct. 2026
6,1 Media

CVE-2026-92551: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-92551

T−42d 2 oct. 2026
8,8 Alta

CVE-2026-92536: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-92536

T−42d 2 oct. 2026
4,3 Media

CVE-2026-96337: falta de autorización en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-96337

T−43d 2 oct. 2026
5,3 Media

CVE-2026-96518: falta de autorización en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-96518

T−43d 2 oct. 2026
8,1 Alta

CVE-2026-85658: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-85658

T−56d 18 sept. 2026
8,1 Alta

CVE-2026-66047: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-66047

T−75d 31 ago. 2026
7,3 Alta

CVE-2026-19848: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-19848

T−78d 28 ago. 2026
5,4 Media

CVE-2026-18385: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-18385

T−90d 15 ago. 2026
8,8 Alta

CVE-2026-13352: subida de ficheros peligrosos en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-13352

T−120d 16 jul. 2026
9,8 Crít.

CVE-2026-12497: gestión incorrecta de privilegios en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-12497

T−134d 3 jul. 2026
4,3 Media

CVE-2026-10820: acceso a datos de otros usuarios (IDOR) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-10820

T−161d 6 jun. 2026
6,4 Media

CVE-2026-41556: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-41556

T−205d 23 abr. 2026
4,3 Media

CVE-2026-4949: falta de autorización en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-4949

T−213d 15 abr. 2026
6,5 Media

CVE-2026-3309: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-3309

T−224d 4 abr. 2026
7,1 Alta

CVE-2026-3445: falta de autorización en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-3445

T−224d 3 abr. 2026
8,1 Alta

CVE-2026-3453: acceso a datos de otros usuarios (IDOR) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2026-3453

T−248d 10 mar. 2026
5,4 Media

CVE-2025-13642: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2025-13642

T−341d 8 dic. 2025
6,5 Media

CVE-2025-8878: inyección de código en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2025-8878

T−456d 15 ago. 2025
4,4 Media

CVE-2024-13121: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2024-13121

T−660d 23 ene. 2025
4,4 Media

CVE-2024-13120: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2024-13120

T−660d 23 ene. 2025
4,4 Media

CVE-2024-13119: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2024-13119

T−660d 23 ene. 2025
5,3 Media

CVE-2024-11083: exposición de información sensible en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2024-11083

T−718d 26 nov. 2024
4,4 Media

CVE-2024-10518: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2024-10518

T−723d 21 nov. 2024
4,4 Media

CVE-2024-10517: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

CVE-2024-10517

T−723d 21 nov. 2024