CVE · Medium

CVE-2026-4949 — ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.13

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-4949 ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.13 Missing Authorization Medium 4.3 < 4.16.13 4.16.13 2026-04-15 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.