SEGURIDAD DE PLUGINS
¿Es seguro Wp User Avatar?
Paid membership & LMS plugin. Sell courses, subscriptions & digital products, paywall content, and add login & registration forms and user profiles.
Qué hace este plugin
- Slug:
wp-user-avatar - Autor: properfraction
- 100000+ instalaciones activas
- 62/100 calificación (938 reseñas en wordpress.org)
- 15722298 descargas totales
- En WordPress.org desde 2013-01-14
courseecommercelmsmembershipUser Registration
Estado de mantenimiento
- Última actualización: 2026-10-31 9:57am GMT
- Probado hasta WordPress: 7.1.4
- Requiere PHP: 8.0+
Vulnerabilidades conocidas
60 CVEs conocidos registrados para Wp User Avatar.
| CVE | Vulnerabilidad | Tipo | Gravedad | Afectadas | Corregido en | Publicado | Estado |
|---|---|---|---|---|---|---|---|
| CVE-2026-123657 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 | Falta de control de autorización | Desconocido | < 4.17.6 | 4.17.6 | 2026-11-11 | — |
| CVE-2026-123656 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 | Control de acceso incorrecto | Desconocido | < 4.17.6 | 4.17.6 | 2026-11-11 | — |
| CVE-2026-123661 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 4.16.13 - < 4.17.4 | Falta de control de autorización | Desconocido | 4.16.13–4.17.4 | 4.17.4 | 2026-11-11 | — |
| CVE-2026-123659 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 | Autorización incorrecta | Media 5,3 | < 4.17.6 | 4.17.6 | 2026-11-11 | — |
| CVE-2026-119473 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.18.0 | Neutralización incorrecta de etiquetas HTML relacionadas con scripts en una página web (XSS básico) | Media 4,3 | < 4.18.0 | 4.18.0 | 2026-11-07 | — |
| CVE-2026-39733 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.18.0 | Neutralización incorrecta de etiquetas HTML relacionadas con scripts en una página web (XSS básico) | Media 5,3 | < 4.18.0 | 4.18.0 | 2026-11-07 | — |
| CVE-2026-96518 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.4 | — | Media 5,9 | < 4.17.4 | 4.17.4 | 2026-10-09 | — |
| CVE-2026-96337 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.4 | — | Media 6,5 | < 4.17.4 | 4.17.4 | 2026-10-09 | — |
+ 64 vulnerabilidades conocidas más
| CVE | Vulnerabilidad | Tipo | Gravedad | Afectadas | Corregido en | Publicado | Estado |
|---|---|---|---|---|---|---|---|
| CVE-2026-92551 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.5 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,1 | < 4.17.5 | 4.17.5 | 2026-10-02 | — |
| CVE-2026-92536 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.5 | Control incorrecto de la generación de código (inyección de código) | Alta 8,8 | < 4.17.5 | 4.17.5 | 2026-10-02 | — |
| CVE-2026-104003 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 | Control incorrecto de la generación de código (inyección de código) | Media 5,4 | < 4.17.6 | 4.17.6 | 2026-10-02 | — |
| CVE-2026-66047 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.2 | — | Alta 8,1 | < 4.17.2 | 4.17.2 | 2026-08-31 | — |
| CVE-2026-85658 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.3 | Control incorrecto de la generación de código (inyección de código) | Alta 8,1 | < 4.17.3 | 4.17.3 | 2026-08-31 | — |
| CVE-2026-18385 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.0 | Control incorrecto de la generación de código (inyección de código) | Media 5,4 | < 4.17.0 | 4.17.0 | 2026-08-15 | — |
| CVE-2026-19848 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.1 | Neutralización incorrecta de elementos especiales en la salida usada por un componente posterior (inyección) | Media 6,5 | < 4.17.1 | 4.17.1 | 2026-08-15 | — |
| CVE-2026-13352 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.19 | Carga de archivos sin restricción de tipo peligroso | Alta 8,8 | < 4.16.19 | 4.16.19 | 2026-07-16 | — |
| CVE-2026-10820 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.17 | Elusión de autorización mediante una clave controlada por el usuario | Desconocido | < 4.16.17 | 4.16.17 | 2026-06-27 | — |
| CVE-2026-41556 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.14 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,5 | < 4.16.14 | 4.16.14 | 2026-04-23 | — |
| CVE-2026-4949 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.13 | Falta de control de autorización | Media 4,3 | < 4.16.13 | 4.16.13 | 2026-04-15 | — |
| CVE-2025-13642 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.8 | Control incorrecto de la generación de código (inyección de código) | Media 5,4 | < 4.16.8 | 4.16.8 | 2025-12-08 | — |
| CVE-2024-13120 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.20 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 4.15.20 | 4.15.20 | 2025-01-23 | — |
| CVE-2024-13119 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.20 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 4.15.20 | 4.15.20 | 2025-01-23 | — |
| CVE-2024-13121 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.20 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Baja 3,5 | < 4.15.20 | 4.15.20 | 2025-01-23 | — |
| CVE-2023-50882 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.13.3 | Falta de control de autorización | Media 5,3 | < 4.13.3 | 4.13.3 | 2024-12-09 | — |
| CVE-2024-11083 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.19 | Exposición de información sensible a un actor no autorizado | Media 5,3 | < 4.15.19 | 4.15.19 | 2024-11-26 | — |
| CVE-2024-10517 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.15 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 4.15.15 | 4.15.15 | 2024-11-21 | — |
| CVE-2024-10518 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.15 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 4.15.15 | 4.15.15 | 2024-11-21 | — |
| CVE-2024-2861 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.9 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 4.15.9 | 4.15.9 | 2024-05-22 | — |
| CVE-2024-2867 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.5 | Validación incorrecta de la entrada | Media 5,4 | < 4.15.5 | 4.15.5 | 2024-04-11 | — |
| CVE-2024-3210 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.6 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 4.15.6 | 4.15.6 | 2024-04-09 | — |
| CVE-2024-1535 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.3 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 4.15.3 | 4.15.3 | 2024-03-12 | — |
| CVE-2024-1806 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.1 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 4.15.1 | 4.15.1 | 2024-02-23 | — |
| CVE-2024-1409 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.1 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 4.15.1 | 4.15.1 | 2024-02-22 | — |
| CVE-2024-1408 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.0 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 4.15.0 | 4.15.0 | 2024-02-19 | — |
| CVE-2024-1570 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.0 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 4.15.0 | 4.15.0 | 2024-02-19 | — |
| CVE-2024-1519 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.0 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,1 | < 4.15.0 | 4.15.0 | 2024-02-19 | — |
| CVE-2024-1046 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.14.4 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 4.14.4 | 4.14.4 | 2024-02-01 | — |
| CVE-2023-44150 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.13.3 | Exposición de información sensible a un actor no autorizado | Alta 7,5 | < 4.13.3 | 4.13.3 | 2023-10-02 | — |
| CVE-2023-41954 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.13.2 | Gestión incorrecta de privilegios | Alta 8,6 | < 4.13.2 | 4.13.2 | 2023-09-09 | — |
| CVE-2023-41953 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.13.2 | Falta de control de autorización | Media 5,3 | < 4.13.2 | 4.13.2 | 2023-09-09 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.11.0 | — | Desconocido | < 4.11.0 | 4.11.0 | 2023-06-26 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.11.0 | — | Desconocido | < 4.11.0 | 4.11.0 | 2023-06-23 | — |
| CVE-2023-23830 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.5 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Alta 7,1 | < 4.5.5 | 4.5.5 | 2023-02-21 | — |
| CVE-2023-23820 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.5 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,5 | < 4.5.5 | 4.5.5 | 2023-02-20 | — |
| CVE-2022-47444 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.5 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Alta 7,1 | < 4.5.5 | 4.5.5 | 2023-01-27 | — |
| CVE-2023-23996 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.4 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,9 | < 4.5.4 | 4.5.4 | 2023-01-20 | — |
| CVE-2022-4698 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.1 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 4.5.1 | 4.5.1 | 2022-12-23 | — |
| CVE-2022-4697 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.1 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 4.5.1 | 4.5.1 | 2022-12-23 | — |
| CVE-2022-45083 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.4.0 | Deserialización de datos no confiables | Media 6,6 | < 4.4.0 | 4.4.0 | 2022-12-14 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.2.16 | — | Desconocido | < 3.2.16 | 3.2.16 | 2022-07-22 | — |
| CVE-2021-24954 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.2.3 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,1 | < 3.2.3 | 3.2.3 | 2021-11-15 | — |
| CVE-2021-24955 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.2.3 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,1 | < 3.2.3 | 3.2.3 | 2021-11-15 | — |
| CVE-2021-24522 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.1.11 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,1 | < 3.1.11 | 3.1.11 | 2021-08-09 | — |
| CVE-2021-24450 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.1.8 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 3.1.8 | 3.1.8 | 2021-06-28 | — |
| CVE-2021-34621 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 3.0.0 - <= 3.1.3 | Gestión incorrecta de privilegios | Crítica 9,8 | 3.0.0–3.1.4 | 3.1.4 | 2021-06-28 | — |
| CVE-2021-34622 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 3.0.0 - <= 3.1.3 | Gestión incorrecta de privilegios | Alta 8,8 | 3.0.0–3.1.4 | 3.1.4 | 2021-06-28 | — |
| CVE-2021-34623 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 3.0.0 - <= 3.1.3 | Carga de archivos sin restricción de tipo peligroso | Crítica 9,8 | 3.0.0–3.1.4 | 3.1.4 | 2021-06-28 | — |
| CVE-2021-34624 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 3.0.0 - <= 3.1.3 | Carga de archivos sin restricción de tipo peligroso | Crítica 9,8 | 3.0.0–3.1.4 | 3.1.4 | 2021-06-28 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.5 | Control incorrecto de la generación de código (inyección de código) | Media 6,5 | < 4.16.5 | 4.16.5 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.12 | — | Desconocido | < 4.16.12 | 4.16.12 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.12 | — | Desconocido | < 4.16.12 | 4.16.12 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.12 | — | Desconocido | < 4.16.12 | 4.16.12 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.18 | — | Desconocido | < 4.16.18 | 4.16.18 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.1.11 | — | Desconocido | < 3.1.11 | 3.1.11 | — | — |
| — | ProfilePress < 3.1.11 - Multiple Vulnerabilities | — | Desconocido | < 3.1.11 | 3.1.11 | — | — |
| CVE-2023-41954 | ProfilePress < 4.13.2 - Limited Privilege Escalation via 'acceptable_defined_roles' | — | Desconocido | < 4.13.2 | 4.13.2 | — | — |
| CVE-2023-41953 | ProfilePress < 4.13.2 Cross-Site Request Forgery via 'admin_notice' | — | Desconocido | < 4.13.2 | 4.13.2 | — | — |
| CVE-2025-8878 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress < 4.16.5 - Unauthenticated Arbitrary Shortcode Execution | — | Desconocido | < 4.16.5 | 4.16.5 | — | — |
| CVE-2026-3453 | ProfilePress < 4.16.12 - Subscriber+ Arbitrary Subscription Cancellation/Expiration | — | Desconocido | < 4.16.12 | 4.16.12 | — | — |
| CVE-2026-3309 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress < 4.16.12 - Unauthenticated Arbitrary Shortcode Execution via Checkout Billing Fields | — | Desconocido | < 4.16.12 | 4.16.12 | — | — |
| CVE-2026-3445 | ProfilePress < 4.16.12 - Subscriber+ Membership Payment Bypass | — | Desconocido | < 4.16.12 | 4.16.12 | — | — |
| CVE-2026-12497 | ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection | — | Desconocido | < 4.16.18 | 4.16.18 | — | — |
Cómo solucionarlo
Actualiza este plugin a la última versión de wordpress.org — cada CVE de arriba indica la versión exacta que lo corrigió ("Corregido en") cuando hay una registrada.
Este es el historial completo de vulnerabilidades conocidas del plugin, no un escaneo de una instalación específica — ejecuta un escaneo gratis de tu propio sitio para verificar tu versión instalada exacta.
Alternativas más seguras / más establecidas
- WooCommerce — 7000000+ instalaciones activas — 90/100 (4832)
- Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation — 1000000+ instalaciones activas — 86/100 (822) — PHP máx. 8.4
- WooCommerce PayPal Payments — 800000+ instalaciones activas — 58/100 (588) — PHP máx. 8.4
- Mailchimp for WooCommerce — 200000+ instalaciones activas — 80/100 (726) — PHP máx. 8.4
- WPML Multilingual & Multicurrency for WooCommerce — 100000+ instalaciones activas — 84/100 (454)
Verifica tu propio sitio WordPress
Ejecuta un escaneo pasivo gratis ahora, o crea una cuenta gratuita e instala el plugin de WP Clinic para un escaneo profundo de toda tu cuenta de hosting y reparación asistida por IA.