CVE

CVE-2026-10820 — ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.17

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-10820 ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.17 Authorization Bypass Through User-Controlled Key Unknown < 4.16.17 4.16.17 2026-06-27 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.