CVE

CVE-2026-123657 — ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-123657 ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 Missing Authorization Unknown < 4.17.6 4.17.6 2026-11-11 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.