This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-123661 | BDVDB-2026-404811 Detail

ProfilePress

Description#

The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans that grant a user role.

Impact#

No impact statement in the source data.

Weaknesses#

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.