WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

Profile Builder – User Profile & User Registration Forms

2022-09-29
Profile Builder < 3.6.1 - Settings Import via CSRF
Fixed in version 3.6.1
2022-03-09
Profile Builder < 3.6.8 - Admin+ Stored Cross-Site Scripting
Fixed in version 3.6.8
2022-02-17
Profile Builder < 3.6.2 - Reflected Cross-Site Scripting
Fixed in version 3.6.2
2021-08-10
Profile Builder < 3.5.1 - Reflected Cross-Site Scripting
Fixed in version 3.5.1
2021-07-19
Profile Builder < 3.4.9 - Admin Access via Password Reset
Fixed in version 3.4.9
2021-06-30
Profile Builder < 3.4.8 - Authenticated Stored XSS
Fixed in version 3.4.8
2020-12-02
Profile Builder & Profile Builder Pro < 3.3.3 - Authenticated Blind SQL Injection
Fixed in version 3.3.3
2020-02-10
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
Fixed in version 3.1.1
2017-03-10
Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in version 2.5.8
2016-07-13
Profile Builder < 2.4.2 - Reflected Cross-Site Scripting (XSS)
Fixed in version 2.4.2
2016-07-08
Profile Builder < 2.4.1 - Privilege Escalation
Fixed in version 2.4.1
2015-11-11
Profile Builder < 2.2.5 - XSS
Fixed in version 2.2.5
2015-04-15
Profile Builder < 2.1.4 - Missing Access Controls
Fixed in version 2.1.4
2014-10-30
Profile Builder < 2.0.3 - Reflected Cross-Site Scripting (XSS)
Fixed in version 2.0.3
2014-08-01
Profile Builder < 1.1.60 - Password Recovery Bypass
Fixed in version 1.1.60
2014-07-16
Profile Builder < 1.1.66 - Multiple XSS
Fixed in version 1.1.66