CVE-2023-4059 Profile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation

The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog...

PT-2022-13500

Name of the Vulnerable Software and Affected Versions Profile Builder WordPress plugin versions prior to 3.6.8 Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and escape Form...