wp register profile with shortcode vulnerabilities and fixes
Recent CVEs affecting wp register profile with shortcode, with upgrade or downgrade steps. 2 tracked.
Also searched as: wpregisterprofilewithshortcode.
wp register profile with shortcode has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-01-11. Highest priority: CVE-2023-5448 (score 37/100).
- CVE-2023-5448 HIGH 8.8 UPGRADE The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Cross-Site Request Forgery in ver
- CVE-2023-23818 MEDIUM 5.9 UPGRADE Auth
FAQ
How do I fix wp register profile with shortcode vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp register profile with shortcode being exploited right now?
None of the tracked wp register profile with shortcode CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp register profile with shortcode CVE should I patch first?
CVE-2023-5448 currently ranks highest (37/100): The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Cross-Site Request Forgery in ver.