CVE-2026-85658 | properfraction ProfilePress Plugin up to 4.17.2 on WordPress Shortcode do_shortcode code injection

September 19, 2026 Yanac

A vulnerability was found in properfraction ProfilePress Plugin up to 4.17.2 on WordPress. It has been classified as critical. This issue affects the function do_shortcode of the component Shortcode Handler. Performing a manipulation results in code injection.

This vulnerability is known as CVE-2026-85658. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More