https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T23:11:30.138532+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123661 fkie_cve-2026-123661 2026-11-11T23:11:30.140288+00:00

The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans that grant a user role.

 https://db.gcve.eu/vuln/ghsa-2vw3-fc6q-5pc2 GHSA-2vw3-fc6q-5pc2 2026-11-11T23:11:30.140485+00:00

The ProfilePress WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans that grant a user role.