WordPress Plugin Vulnerabilities

Ultimate Profile Builder By CMSHelpLive < 3.0 - CSRF/XSS

Description

The Ultimate Profile Builder WordPress plugin was affected by a CSRF/XSS security vulnerability.

Affects Plugins

Plugin icon
ultimate-profile-builder
Fixed in 3.0

References

Exploitdb
36958
URL
https://packetstormsecurity.com/files/#131815/
URL
https://seclists.org/bugtraq/2015/May/46

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
6963d5a4-d21a-48d0-bed8-332d7c229adf

Timeline

Publicly Published
2015-05-06 (about 11 years ago)
Added
2015-05-06 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-11-22
Title
WP Stripe Checkout < 1.2.2.21 - Contributor+ Stored XSS
Published
2024-01-31
Title
Advanced iFrame < 2024.0 - Contributor+ Stored XSS
Published
2024-04-16
Title
QR Code Composer < 2.0.4 - Subscriber+ Stored XSS
Published
2016-06-27
Title
WP Security Audit Log 1.5-2.4.3 - Authenticated Reflected Cross-Site Scripting (XSS)
Published
2022-02-28
Title
AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting