Plugin icon

Profile Extra Fields by BestWebSoft

profile-extra-fields

Vulnerabilities:

4

Last Updated:

September 8, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-08-07
Title
Profile Extra Fields by BestWebSoft <= 1.3.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2023-10-05
Title
Profile Extra Fields by BestWebSoft < 1.2.8 - Unauthenticated Sensitive Data Disclosure
Fixed in
Fixed in 1.2.8
CVSS
5.3 (medium)
Published
2021-12-20
Title
Profile Extra Fields < 1.2.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.2.4
CVSS
7.1 (high)
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.0.7
CVSS
6.1 (medium)