Skip to content
Threat Feed
Subscribe

Product

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content (<= 4.17.2)

1 brief RSS
high advisory

Arbitrary Shortcode Execution in ProfilePress Plugin

The ProfilePress WordPress plugin is vulnerable to arbitrary shortcode execution in versions up to 4.17.2, allowing authenticated users with subscriber-level access to execute arbitrary shortcodes.

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content wordpress vulnerability rce
2t 1c