WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profile-builder
Published
2024-07-08
Title
User Profile Builder < 3.11.8 - Unauthenticated Media Upload
Slug
profile-builder
Published
2024-07-10
Title
profile-builder < 3.11.9 - Unauthenticated Privilege Escalation
Slug
profile-builder
Published
2024-07-10
Title
Profile Builder <= 3.12.0 - Admin+ Stored Cross Site Scripting
Slug
profile-builder
Published
2025-01-06
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 3.13.0 - Unauthenticated Stored Cross-Site Scripting
Slug
profile-builder
Published
2025-04-15
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 3.13.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
profile-builder
Published
2025-06-02
Title
Profile Builder < 3.13.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes
Slug
profile-builder
Published
2025-06-05
Title
Profile Builder < 3.13.9 - Unauthenticated Content Spoofing
Slug
profile-builder
Published
2025-08-15
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 3.14.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
profile-builder
Published
2025-11-18
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 3.14.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
profile-builder
Published
2026-01-12
Title
User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset
Slug
profile-builder
Published
2026-03-30
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 3.15.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field
Slug
profile-builder-pro
Published
2020-02-10
Title
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
Slug
profile-builder-pro
Published
2020-12-02
Title
Profile Builder & Profile Builder Pro < 3.3.3 - Authenticated Blind SQL Injection
Slug
profile-builder-pro
Published
2022-02-17
Title
Profile Builder < 3.6.2 - Reflected Cross-Site Scripting
Slug
profile-builder-pro
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Reflected Cross-Site Scripting
Slug
profile-builder-pro
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure
Slug
profile-builder-pro
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Cross-Site Request Forgery
Slug
profile-builder-pro
Published
2026-02-23
Title
Profile Builder Pro <= 3.13.9 - Unauthenticated SQL Injection
Slug
profile-extra-fields
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
profile-extra-fields
Published
2021-12-20
Title
Profile Extra Fields < 1.2.4 - Reflected Cross-Site Scripting
Slug
profile-extra-fields
Published
2023-10-05
Title
Profile Extra Fields by BestWebSoft < 1.2.8 - Unauthenticated Sensitive Data Disclosure
Slug
profile-widget-ninja
Published
2025-02-24
Title
Profile Widget Ninja <= 4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2018-05-18
Title
ProfileGrid – User Profiles, Groups and Communities <= 2.8.5 - Authenticated Code Execution
Slug
profilegrid-user-profiles-groups-and-communities
Published
2022-01-18
Title
ProfileGrid < 4.7.5 - Subscriber+ Stored Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2022-10-24
Title
ProfileGrid < 5.1.1 - Reflected Cross-Site Scripting