CVE-2021-24545

CVE-2021-24545 目前该插件已停止分发，是在该插件中发现的XSS漏洞。 WordPress Plugin HTML Author Bio description XSS 该漏洞是由于 /wp-admin/profile.php 中 description 参数的不当验证引起的。 远程攻击者可以通过发送恶意构造的HTTP请求进行攻击。 安装及运行步骤 1. WordPress 安装 进行安装时，请在 docker-compose.yml 文件中进行端口转发。 $ docker-compose up 2. WordPress initial & Plugin...

WordPress User Profile Builder plugin <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability

Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability discovered by daroo in WordPress Plugin Profile Builder versions = 3.15.7...

CVE-2026-6431

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...

CVE-2026-6431 User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and including, 3.15.7 due to insufficient input sanitization and...