[ Vendor · 6 CVEs ]
properfraction
CVEs affecting properfraction published in the last 30 days, plus any properfraction CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104003 | 16 Oct 2026 | CVSS 5.4 | properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePressThe WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This… | |
| CVE-2026-109515 | 16 Oct 2026 | CVSS 9.8 | properfraction MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation… | |
| CVE-2026-96518 | 9 Oct 2026 | CVSS 5.9 | properfraction ProfilePressMissing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-96337 | 9 Oct 2026 | CVSS 6.5 | properfraction ProfilePressMissing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-92551 | 3 Oct 2026 | CVSS 6.1 | properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePressThe Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is… | |
| CVE-2026-92536 | 3 Oct 2026 | CVSS 8.8 | properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePressThe Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is… |