CVEs we hold for Properfraction
Records whose assigning authority named Properfraction as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-85658Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.2 -…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2026-66703WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerabilityproperfraction MailOptin
CVE-2026-59520WordPress CrawlWP SEO plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) vulnerabilityproperfraction CrawlWP SEO
CVE-2026-57813WordPress MailOptin plugin <= 1.2.77.3 - Privilege Escalation vulnerabilityproperfraction MailOptin
CVE-2026-4949ProfilePress <= 4.16.12 - Missing Authorization to Authenticated (Subscriber+) Inactive Membership Plan Subscriptionproperfraction Paid Membership Plugin, Ecommerce, User…
CVE-2026-41556WordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerabilityproperfraction ProfilePress
CVE-2026-3453ProfilePress <= 4.16.11 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Subscription…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2026-3445Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2026-3424kk Star Ratings <= 5.4.10.3 - Unauthenticated Arbitrary Shortcode Execution via 'payload' Parameterproperfraction kk Star Ratings – Rate Post & Collect User…
CVE-2026-3309Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2026-18385Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.19 -…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2026-13352Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.18 -…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2025-8878Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2025-58596WordPress MailOptin Plugin <= 1.2.75.0 - Cross Site Scripting (XSS) Vulnerabilityproperfraction MailOptin
CVE-2025-13642ProfilePress <= 4.16.7 - Authenticated (Subscriber+) Arbitrary Shortcode Executionproperfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-8628Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.70.3 - Authenticated…properfraction MailOptin – Popup, Optin Forms & Email…
CVE-2024-3210Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-2867Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-2861ProfilePress <= 4.15.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ProfilePress User Panel Widgetproperfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-1806ProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-1570ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeproperfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-1535ProfilePress <= 4.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeproperfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-1519Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-1409Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-1408ProfilePress <= 4.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via [edit-profile-text-box] shortcodeproperfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-12309Rate My Post – Star Rating Plugin by FeedbackWP <= 4.2.4 - Unauthenticated Voting On Scheduled Postsproperfraction Rate My Post – Star Rating Plugin by…
CVE-2024-11977kk Star Ratings – Rate Post & Collect User Feedbacks <= 5.4.10 - Unauthenticated Arbitrary Shortcode Executionproperfraction kk Star Ratings – Rate Post & Collect User…
CVE-2024-11083ProfilePress <= 4.15.18 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposureproperfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-1046Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress…properfraction Paid Membership Plugin, Ecommerce, User…
CVE-2024-0428Index Now <= 2.6.3 - Cross-Site Request Forgery via reset_formproperfraction CrawlWP SEO – Instant Search Engine Indexing…
CVE-2023-50882WordPress ProfilePress plugin <= 4.13.2 - Broken Access Control vulnerabilityproperfraction ProfilePress
CVE-2022-4698ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settingsproperfraction Paid Membership Plugin, Ecommerce, User…
CVE-2022-4697ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scriptingproperfraction Paid Membership Plugin, Ecommerce, User…
33 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.