Input validation vulnerability in Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 4.13.2

The ProfilePress plugin for WordPress has a security vulnerability that could potentially affect versions up to, and including, version 4.13.1. This security issue is due to the lack of, or incorrect, nonce validation on the ‘admin_notice’ function. This means that unauthenticated attackers may be able to dismiss admin notices if they can convince a site administrator to do something like click a link. The full impact of this vulnerability is not currently known.