Input validation vulnerability in Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 4.14.4

The ProfilePress plugin for WordPress, which includes features such as Paid Membership, Ecommerce, User Registration, Login, User Profile, and Restricting Content, has a security vulnerability. This vulnerability, known as Stored Cross-Site Scripting, allows attackers with certain levels of access to insert harmful code into pages that will be executed when users visit those pages. This can occur in all versions of the plugin up to version 4.14.4 due to inadequate protection of user input and output.