ProfilePress

Admin+ Stored XSS vulnerability < 4.15.15

5.9

12 December, 2024

Unauthenticated Content Restriction Bypass to Sensitive Information Exposure vulnerability <= 4.15.18

5.3

26 November, 2024

Authenticated (Contributor+) Stored CrossSite Scripting via ProfilePress User Panel Widget vulnerability <= 4.15.8

6.5

23 May, 2024

Authenticated (Contributor+) Stored CrossSite Scripting vulnerability <= 4.15.4

6.5

15 April, 2024

Authenticated Stored CrossSite Scripting vulnerability <= 4.15.5

6.4

11 April, 2024