Skip to content
Threat Feed
Subscribe

Product

ProfilePress Plugin for WordPress

1 brief RSS
high advisory

Arbitrary File Upload Vulnerability in ProfilePress WordPress Plugin (CVE-2026-13352)

An arbitrary file upload vulnerability, CVE-2026-13352, affects the ProfilePress plugin for WordPress up to version 4.16.18, allowing authenticated attackers with author-level privileges or higher to upload executable files, which can lead to remote code execution.

ProfilePress plugin for WordPress wordpress vulnerability rce file-upload cms
3t 1c