WordPress Vulnerability Scanner WPSec
Vulnerabilities / Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content vulnerabilities

Advisories WPSec published for Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress. Other sources may list more. Its attack surface: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-03 WPSEC-2026-0404 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Unauthenticated Brute Force Protection Bypass Medium 4.8 4.17.6
2026-10-03 WPSEC-2026-0403 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Comment Content Medium 6.3 4.17.6
2026-10-03 WPSEC-2026-0402 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Unauthenticated Sensitive Information Exposure via Member Directory Filters Medium 5.3 4.17.6
2026-10-03 WPSEC-2026-0401 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Unauthenticated Privilege Escalation via Registration Form ID Tampering High 8.1 4.17.6
2026-10-03 WPSEC-2026-0400 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Unauthenticated Content Restriction Bypass via REST API Medium 5.3 4.17.6
2026-10-03 WPSEC-2026-0399 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Unauthenticated Limited File Upload via Non-File Custom Fields Medium 5.3 4.17.6
2026-10-03 WPSEC-2026-0398 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Reflected Cross-Site Scripting via 'start_date' and 'end_date' Parameters Medium 6.1 4.17.6
2026-10-03 WPSEC-2026-0397 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Unauthenticated Reflected Cross-Site Scripting via Member Directory Date Filter Medium 6.1 4.17.6
2026-10-02 WPSEC-2026-0229 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Reflected Cross-Site Scripting via Uploaded Filename Medium 6.1 4.17.5
2026-10-02 WPSEC-2026-0228 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Nickname and Biographical Info Profile Fields Medium 6.3 4.17.5

License: CC BY 4.0