CVE

CVE-2026-123661 — ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 4.16.13 - < 4.17.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-123661 ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 4.16.13 - < 4.17.4 Missing Authorization Unknown 4.16.13–4.17.4 4.17.4 2026-11-11 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.