CVE-2023-41953

Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - audit@patchstack.com

Published

2024-12-09

Last modified

2026-04-28

Weaknesses

CWE-862

Affected products

• Profilepress (Profilepress)
• Profilepress (Profilepress Membership Team)
• Profilepress (Properfraction)

References

• https://patchstack.com/database/wordpress/plugin/wp-user-avatar/vulnerability/wordpress-profilepress-plugin-4-13-1-brok…