WordPress Plugin Vulnerabilities

Profile Builder < 2.2.5 - XSS

Description

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
profile-builder
Fixed in 2.2.5

References

CVE
CVE-2015-9328

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
a3cdc2fb-e7b4-47e0-aec9-22bf1a65ae0b

Timeline

Publicly Published
2015-11-11 (about 10 years ago)
Added
2019-08-25 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2017-05-15
Title
Ultimate Addons for Visual Composer < 3.16.12 - Authenticated XSS, CSRF, RCE
Published
2024-11-08
Title
AchillesTheme-shortcodes <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-09-05
Title
WP Publication Archive <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-02-20
Title
Gutenberg Blocks by WordPress Download Manager < 2.1.9 - Contributor+ XSS
Published
2024-08-26
Title
Tempera <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting