WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
products-rearrange-woocommerce
Published
2026-03-20
Title
Product Rearrange for WooCommerce <= 1.2.2 - Missing Authorization
Slug
professional-contact-form
Published
2025-09-26
Title
Professional Contact Form <= 1.0.0 - Cross-Site Request Forgery to Test Email Sending
Slug
profile-builder
Published
2014-08-01
Title
Profile Builder < 1.1.60 - Password Recovery Bypass
Slug
profile-builder
Published
2014-10-30
Title
Profile Builder < 2.0.3 - Reflected Cross-Site Scripting (XSS)
Slug
profile-builder
Published
2016-07-08
Title
Profile Builder < 2.4.1 - Privilege Escalation
Slug
profile-builder
Published
2016-07-13
Title
Profile Builder < 2.4.2 - Reflected Cross-Site Scripting (XSS)
Slug
profile-builder
Published
2017-03-10
Title
Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
profile-builder
Published
2015-11-11
Title
Profile Builder < 2.2.5 - XSS
Slug
profile-builder
Published
2015-04-15
Title
Profile Builder < 2.1.4 - Missing Access Controls
Slug
profile-builder
Published
2014-07-16
Title
Profile Builder < 1.1.66 - Multiple XSS
Slug
profile-builder
Published
2020-02-10
Title
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
Slug
profile-builder
Published
2020-12-02
Title
Profile Builder & Profile Builder Pro < 3.3.3 - Authenticated Blind SQL Injection
Slug
profile-builder
Published
2021-06-30
Title
Profile Builder < 3.4.8 - Authenticated Stored XSS
Slug
profile-builder
Published
2021-07-19
Title
Profile Builder < 3.4.9 - Admin Access via Password Reset
Slug
profile-builder
Published
2022-02-17
Title
Profile Builder < 3.6.2 - Reflected Cross-Site Scripting
Slug
profile-builder
Published
2022-03-09
Title
Profile Builder < 3.6.8 - Admin+ Stored Cross-Site Scripting
Slug
profile-builder
Published
2021-08-10
Title
Profile Builder < 3.5.1 - Reflected Cross-Site Scripting
Slug
profile-builder
Published
2022-09-29
Title
Profile Builder < 3.6.1 - Settings Import via CSRF
Slug
profile-builder
Published
2023-02-13
Title
Profile Builder < 3.9.1 - Subscriber+ Arbitrary User Meta Disclosure
Slug
profile-builder
Published
2023-02-13
Title
Profile Builder < 3.9.1 - Unauthorised Password Reset
Slug
profile-builder
Published
2023-08-09
Title
Profile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation
Slug
profile-builder
Published
2023-11-07
Title
Profile Builder < 3.10.4 - Plugins Activation/Deactivation CSRF
Slug
profile-builder
Published
2024-01-05
Title
Profile Builder < 3.10.8 - Contributor+ User Metadata Disclosure
Slug
profile-builder
Published
2024-01-16
Title
User Profile Builder < 3.10.9 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update
Slug
profile-builder
Published
2024-04-05
Title
Profile Builder < 3.11.3 - Restricted Email Bypass