Saltar al contenido

Radar en marcha

Bastion/Radar

[■] Plugin de WordPress

ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

60 expedientes en el radar

Comprueba tu versión de ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content Sólo las que se están explotando

[■] Registro

Vulnerabilidades (60)

  1. 6,4 Media

    CVE-2024-2861: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-2861

    T−906d 22 may. 2024

  2. 6,4 Media

    CVE-2024-2867: validación de entrada incorrecta en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-2867

    T−947d 11 abr. 2024

  3. 6,4 Media

    CVE-2024-3210: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-3210

    T−949d 9 abr. 2024

  4. 6,4 Media

    CVE-2024-1535: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-1535

    T−977d 12 mar. 2024

  5. 6,4 Media

    CVE-2024-1806: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-1806

    T−995d 23 feb. 2024

  6. 6,4 Media

    CVE-2024-1409: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-1409

    T−996d 22 feb. 2024

  7. 6,4 Media

    CVE-2024-1570: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-1570

    T−999d 19 feb. 2024

  8. 6,4 Media

    CVE-2024-1408: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-1408

    T−999d 19 feb. 2024

  9. 6,5 Media

    CVE-2024-1519: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-1519

    T−999d 19 feb. 2024

  10. 6,4 Media

    CVE-2024-1046: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2024-1046

    T−1017d 1 feb. 2024

  11. 5,3 Media

    CVE-2023-44150: exposición de información sensible en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2023-44150

    T−1139d 2 oct. 2023

  12. 7,3 Alta

    CVE-2023-41954: validación de entrada incorrecta en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2023-41954

    T−1162d 9 sept. 2023

  13. 4,3 Media

    CVE-2023-41953: falsificación de peticiones (CSRF) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2023-41953

    T−1162d 9 sept. 2023

  14. 6,1 Media

    Cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    T−1240d 23 jun. 2023

  15. 7,2 Alta

    CVE-2022-47444: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2022-47444

    T−1328d 27 mar. 2023

  16. 7,2 Alta

    CVE-2023-23830: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2023-23830

    T−1362d 21 feb. 2023

  17. 6,4 Media

    CVE-2023-23820: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2023-23820

    T−1363d 20 feb. 2023

  18. 5,5 Media

    CVE-2023-23996: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2023-23996

    T−1394d 20 ene. 2023

  19. 5,5 Media

    CVE-2022-4698: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2022-4698

    T−1422d 23 dic. 2022

  20. 5,5 Media

    CVE-2022-4697: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2022-4697

    T−1422d 23 dic. 2022

  21. 6,6 Media

    CVE-2022-45083: deserialización de datos no fiables en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2022-45083

    T−1431d 14 dic. 2022

  22. 6,1 Media

    Cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    T−1576d 22 jul. 2022

  23. 6,1 Media

    CVE-2021-24955: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2021-24955

    T−1825d 15 nov. 2021

  24. 6,1 Media

    CVE-2021-24954: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2021-24954

    T−1825d 15 nov. 2021

  25. 7,2 Alta

    CVE-2021-24522: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2021-24522

    T−1923d 9 ago. 2021

  26. 9,8 Crít.

    CVE-2021-34624: subida de ficheros peligrosos en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2021-34624

    T−1956d 7 jul. 2021

  27. 8,8 Alta

    CVE-2021-34622: gestión incorrecta de privilegios en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2021-34622

    T−1956d 7 jul. 2021

  28. 9,8 Crít.

    CVE-2021-34621: gestión incorrecta de privilegios en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2021-34621

    T−1956d 7 jul. 2021

  29. 5,5 Media

    CVE-2021-24450: cross-site scripting (XSS) en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2021-24450

    T−1965d 28 jun. 2021

  30. 9,8 Crít.

    CVE-2021-34623: subida de ficheros peligrosos en ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content

    CVE-2021-34623

    T−1965d 28 jun. 2021