WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profile-builder
Published
2026-08-27
Title
Profile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date Shortcode
Slug
profile-builder
Published
2026-08-27
Title
Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass
Slug
profile-builder
Published
2026-08-31
Title
User Profile Builder < 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute
Slug
profile-builder
Published
2026-08-31
Title
User Profile Builder < 4.0.1 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter
Slug
profile-builder
Published
2026-08-30
Title
Profile Builder < 3.16.1 - Unauthenticated Limited File Upload
Slug
profile-builder
Published
2026-09-24
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
profile-builder
Published
2026-09-24
Title
User Profile Builder < 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field
Slug
profile-builder
Published
2026-09-24
Title
User Profile Builder < 4.0.3 - Unauthenticated Stored Cross-Site Scripting via Avatar Field
Slug
profile-builder
Published
2026-10-15
Title
User Profile Builder < 4.0.4 - Unauthenticated Stored Cross-Site Scripting via First Name Field
Slug
profile-builder
Published
2026-10-15
Title
User Profile Builder < 4.0.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
Slug
profile-builder
Published
2026-10-15
Title
User Profile Builder < 4.0.4 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]
Slug
profile-builder
Published
2026-10-19
Title
Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions
Slug
profile-builder
Published
2026-10-21
Title
Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass
Slug
profile-builder
Published
2026-10-20
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.5 - Authenticated (Author+) Privilege Escalation
Slug
profile-builder
Published
2026-10-21
Title
Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change
Slug
profile-builder
Published
2026-10-21
Title
Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attribute
Slug
profile-builder
Published
2026-10-20
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.4 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attribute
Slug
profile-builder
Published
2026-10-29
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.6 - Missing Authorization
Slug
profile-builder
Published
2026-10-30
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.6 - Unauthenticated Stored Cross-Site Scripting
Slug
profile-builder
Published
2026-10-30
Title
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.6 - Authenticated (Contributor+) Privilege Escalation
Slug
profile-builder-pro
Published
2020-02-10
Title
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
Slug
profile-builder-pro
Published
2020-12-02
Title
Profile Builder & Profile Builder Pro < 3.3.3 - Authenticated Blind SQL Injection
Slug
profile-builder-pro
Published
2022-02-17
Title
Profile Builder < 3.6.2 - Reflected Cross-Site Scripting
Slug
profile-builder-pro
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Reflected Cross-Site Scripting
Slug
profile-builder-pro
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure