GCVE - cpe:2.3:a:profilepress:profilepress:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:profilepress:profilepress:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Profilepress (`2a5a8b68-868b-5ab4-8c20-a8bea8bb42f9`)
Product	Profilepress (`ad339db8-2504-5a6e-93a3-ff9a57bf1f38`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/wp-plugins/profilepress`	purl2cpe	2026-06-01 10:11:21.470313

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-34624`	vulnerable	2026-06-08 05:32:14.306332	ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in File Uploader Component CRITICAL (9.8) A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. . Published: 2021-07-07T12:21:21.639Z Updated: 2024-10-15T18:51:23.584Z Open on db.gcve.eu Reference links https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34623`	vulnerable	2026-06-08 05:32:14.305844	ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component CRITICAL (9.8) A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. . Published: 2021-07-07T12:21:10.704Z Updated: 2024-10-15T19:06:17.719Z Open on db.gcve.eu Reference links https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34622`	vulnerable	2026-06-08 05:32:14.305320	ProfilePress 3.0 - 3.1.3 - Authenticated Privilege Escalation CRITICAL (9.8) A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfilePress WordPress plugin made it possible for users to escalate their privileges to that of an administrator while editing their profile. This issue affects versions 3.0.0 - 3.1.3. . Published: 2021-07-07T12:20:58.388Z Updated: 2024-10-15T19:10:53.294Z Open on db.gcve.eu Reference links https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34621`	vulnerable	2026-06-08 05:32:14.302533	ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation CRITICAL (9.8) A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. . Published: 2021-07-07T12:21:16.266Z Updated: 2024-10-15T18:57:02.370Z Open on db.gcve.eu Reference links https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/ http://packetstormsecurity.com/files/163973/WordPress-ProfilePress-3.1.3-Privilege-Escalation.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.