Input validation vulnerability in Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 4.15.19

A popular plugin for WordPress called “Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress” has a security issue. This means that unauthorized individuals can inject harmful web scripts into the plugin’s admin settings, which could then be executed when a user accesses those pages. The vulnerability affects all versions up to 4.15.19 and is due to a lack of proper input sanitization and output escaping. However, this only affects WordPress sites with multiple installations or where certain security measures have been disabled.