What’s Vulnerable › Products

PeproDev Ultimate Profile Solutions vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your PeproDev Ultimate Profile Solutions version is affected

Latest PeproDev Ultimate Profile Solutions vulnerabilities

• CVE-2026-4791 — PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute (CVSS 6.4)
• CVE-2025-3924 — PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumeration (CVSS 5.3)
• CVE-2025-3921 — PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Function (CVSS 8.2)
• CVE-2025-3844 — PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover (CVSS 9.8)