properfraction
- Total products in the ecosystem
- 8
- Total vulnerabilities (90 days)
- 10
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/26/2026, properfraction recorded 10 security vulnerabilities in the last 90 days across 5 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress had the most security vulnerabilities in the properfraction ecosystem, with 5 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-104003Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Comment Content Rendered on ProfilePress User Profile 'Comments' TabCVE-2026-109515MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' ParameterCVE-2026-96337WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerabilityCVE-2026-96518WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerabilityCVE-2026-92551Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Reflected Cross-Site Scripting via ppress_billing_address Filename Parameter63 Results | Page 1 of 7
| SeverityCritical |
| SeverityMedium |
| SeverityMedium |
| Published10/03/2026 |
| SeverityMedium |
| Published10/03/2026 |
| SeverityHigh |
| Published09/19/2026 |
| SeverityHigh |
| SeverityMedium |
| Published08/16/2026 |
| SeverityMedium |
| SeverityMedium |