Plugin icon

Profile Builder Pro

profile-builder-pro

Vulnerabilities:

9

Last Updated:

n/a

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-05-01
Title
Profile Builder Pro < 3.14.6 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 3.14.6
CVSS
8.1 (high)
Published
2026-04-27
Title
Profile Builder Pro < 3.15.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 3.15.1
CVSS
7.2 (high)
Published
2026-02-23
Title
Profile Builder Pro < 3.14.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.14.0
CVSS
7.5 (high)
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.10.1
CVSS
6.1 (medium)
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Cross-Site Request Forgery
Fixed in
Fixed in 3.10.1
CVSS
8.8 (high)
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure
Fixed in
Fixed in 3.10.1
CVSS
6.5 (medium)
Published
2022-02-17
Title
Profile Builder < 3.6.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.6.2
CVSS
6.1 (medium)
Published
2020-12-02
Title
Profile Builder & Profile Builder Pro < 3.3.3 - Authenticated Blind SQL Injection
Fixed in
Fixed in 3.3.3
CVSS
6.6 (medium)
Published
2020-02-10
Title
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
Fixed in
Fixed in 3.1.1
CVSS
10.0 (critical)