Properfraction vulnerabilities
We track 11 vulnerabilities in Properfraction products across 6 products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest Properfraction vulnerabilities
- 9.8 Critical severity
MailOptin – Popup, Optin Forms & Email…: Improper Privilege Management
The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the `subscribe_to_email_list` endpoint accepting
- 8.8 High severity
Paid Membership Plugin, Ecommerce, User…: Improper Control of Generation of Code
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.17.4 via the get_user_profile
- 8.1 High severity
Paid Membership Plugin, Ecommerce, User…: Improper Control of Generation of Code
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.17.2 This is due to the softwa
- 8.8 High severity
Paid Membership Plugin, Ecommerce, User…: Unrestricted Upload of File with Dangerous Type
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 4.16.18 via the allowed_mime_types funct
- 9.8 Critical severity
MailOptin: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <= 1.2.77.3.
- 7.1 High severity
Paid Membership Plugin, Ecommerce, User…: Missing Authorization
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to
- 8.1 High severity
Paid Membership Plugin, Ecommerce, User…: Authorization Bypass Through User-Controlled Key
The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11. This is due to missing ownership validation on the change_plan_sub_id parameter in the process_checkout() function. The ppres
- 7.3 High severity
kk Star Ratings – Rate Post & Collect User…: Improper Control of Generation of Code
The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10. This is due to the software allowing users to execute an action that does not properl
- 8.8 High severity
CrawlWP SEO – Instant Search Engine Indexing &…: Cross-Site Request Forgery
The Index Now plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.3. This is due to missing or incorrect nonce validation on the 'reset_form' function. This makes it possible for unauthenticated attackers
- 7.2 High severity
Paid Membership Plugin, Ecommerce, User…: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, User Reg
- 7.5 High severity
Paid Membership Plugin, Ecommerce…: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin,