WordPress Profile Builder plugin <= 3.3.2 - Authenticated Blind SQL Injection (SQLi) vulnerability

Authenticated Blind SQL Injection SQLi vulnerability found by Lenon Leite in WordPress Profile Builder plugin versions = 3.3.2. Solution Update the WordPress Profile Builder plugin to the latest available version at least 3.3.3...

WordPress Profile Builder Pro plugin <= 3.1.0 - User Registration With Administrator Role vulnerability

User Registration With Administrator Role vulnerability found by Noman Riffat in WordPress Profile Builder Pro plugin versions = 3.1.0. Solution Update the WordPress Profile Builder Pro plugin to the latest available version at least 3.1.1...

Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role

The plugin is affected by a broken authentication vulnerability, allowing unauthenticated users to register or edit their account and gain the Administrator role using the plugin's forms. The vulnerability only exists in the Plugin's own generated Registration Form or Profile Edit Form. This mean...

WordPress Profile Builder plugin <= 3.1.0 - User Registration With Administrator Role vulnerability

User Registration With Administrator Role vulnerability found by Noman Riffat in WordPress Profile Builder plugin versions = 3.1.0. Solution Update the WordPress Profile Builder plugin to the latest available version at least 3.1.1...

Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role

The plugin is affected by a broken authentication vulnerability, allowing unauthenticated users to register or edit their account and gain the Administrator role using the plugin's forms. The vulnerability only exists in the Plugin's own generated Registration Form or Profile Edit Form. This mean...

WordPress profile-builder plugin access control error vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form builder plugin that uses it. simple-login-log is a user login logging plugin that uses it...

WordPress profile-builder plugin cross-site scripting vulnerability (CNVD-2019-32396)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress profile-builder plugin. An attacker can exploit...

WordPress profile-builder plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress profile-builder plugin. An attacker can exploit...

WordPress profile-builder plugin cross-site scripting vulnerability (CNVD-2019-32407)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress profile-builder plugin. An attacker can exploit...

CVE-2015-9337

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX...

Improper access control

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX...

CVE-2015-9337

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX...

CVE-2015-9337

The CVE concerns the WordPress plugin Profile Builder. Before version 2.1.4, it has no access control for activating or deactivating addons via AJAX, enabling unauthorized addon management and potentially partial integrity impact. Affected software: WordPress Profile Builder plugin (pre-2.1.4). R...

CVE-2016-10911

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues...

CVE-2014-10380

The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...

CVE-2015-9328

The profile-builder plugin before 2.2.5 for WordPress has XSS...

Cross site scripting

The profile-builder plugin before 2.2.5 for WordPress has XSS...

CVE-2016-10911

The CVE references the WordPress Profile Builder plugin (before version 2.4.2) as affected. It lists multiple XSS issues affecting that plugin. Exploitation details and exact impact are not fully specified beyond XSS in the supplied documents. Remediation implied by the CVE is to upgrade to versi...

CVE-2016-10911

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues...

CVE-2015-9328

CVE-2015-9328 affects the WordPress community plugin Profile Builder (WordPress plugin) prior to version 2.2.5 . The vulnerability is a cross-site scripting (XSS) flaw in the plugin, enabling an attacker to inject and execute client-side code. Multiple sources corroborate the issue as an XSS in t...