WordPress Vulnerability Scanner WPSec
Vulnerabilities / PeproDev Ultimate Profile Solutions

PeproDev Ultimate Profile Solutions vulnerabilities

Advisories WPSec published for PeproDev Ultimate Profile Solutions. Other sources may list more. Its attack surface: PeproDev Ultimate Profile Solutions on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-11-06 WPSEC-2026-2654 PeproDev Ultimate Profile Solutions <= 8.3.0 - Reflected Cross-Site Scripting via 'section' Parameter Medium 6.1 8.3.20
2026-11-06 WPSEC-2026-2653 PeproDev Ultimate Profile Solutions <= 8.3.0 - Authenticated (Subscriber+) Missing Authorization to Restricted Announcement Access Medium 4.3 8.3.20
2026-11-06 WPSEC-2026-2652 PeproDev Ultimate Profile Solutions <= 8.3.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Order Information Disclosure Medium 4.3 8.3.20
2026-11-06 WPSEC-2026-2651 PeproDev Ultimate Profile Solutions <= 8.3.0 - Authenticated (Subscriber+) Missing Authorization to Private Notification Disclosure Medium 4.3 8.3.20
2026-11-06 WPSEC-2026-2650 PeproDev Ultimate Profile Solutions <= 8.3.0 - Reflected Cross-Site Scripting via 's' Parameter Medium 6.1 8.3.20
2026-11-06 WPSEC-2026-2649 PeproDev Ultimate Profile Solutions <= 8.3.0 - Authenticated (Subscriber+) Mobile Number Verification Bypass Medium 4.3 8.3.20

License: CC BY 4.0