User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) vulnerabilities

Product

User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar)

by · last CVE Aug 9, 2021

CVEs

On KEV

6.1

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 0High 0Medium 1Low 0

Severity

All severities1 Critical0 High0 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-24522	6.1	2%	Aug 9	ProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget Affected: 3.1.11 before 3.1.11