← All advisories

Medium severity6.5NVD Advisory· Published Jun 15, 2026· Updated Jun 15, 2026

CVE-2026-41556

CVE-2026-41556

Description

Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Profilepressllm-fuzzy
Range: <=4.16.13
Package: https://wordpress.org/plugins/profilepress

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/wp-user-avatar/vulnerability/wordpress-profilepress-plugin-4-16-13-cross-site-scripting-xss-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.