What’s Vulnerable › Products

Venutius BP Profile Shortcodes Extra vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Venutius BP Profile Shortcodes Extra version is affected

Latest Venutius BP Profile Shortcodes Extra vulnerabilities

• CVE-2025-22817 — WordPress BP Profile Shortcodes Extra plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-11732 — BP Profile Shortcodes Extra <= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter (CVSS 6.5)
• CVE-2023-47815 — WordPress BP Profile Shortcodes Extra Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)