CVE

CVE-2026-123656 — ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-123656 ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 Improper Access Control Unknown < 4.17.6 4.17.6 2026-11-11 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.