CVE-2015-9328

The profile-builder plugin before 2.2.5 for WordPress has XSS...

CVE-2014-10380

The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...

CVE-2014-10380

CVE-2014-10380 affects the WordPress Profile Builder plugin prior to 1.1.66, with multiple XSS flaws in forms. The connected Red Hat/CVE pages and other sources reiterate the same description. No explicit exploitation details, impact scope, or remediation/version-specific fixes are provided in th...

WordPress Profile Builder Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Profile Builder is one of the profile release plugin . A cross-site scripting vulnerability exists in the...

WordPress Profile Builder Plugin < 2.0.3 Multiple XSS Vulnerabilities

The WordPress plugin Copyright C 2017 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...

CVE-2014-8492

Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...

CVE-2014-8492

The CVE-2014-8492 entry concerns multiple XSS vulnerabilities in WordPress Profile Builder plugin prior to v2.0.3. Vulnerable component: assets/misc/fallback-page.php; affected parameters: site_name, message, site_url. Root cause: improper sanitization of input leading to script/HTML injection. I...

Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)

Stored Cross-Site Scripting XSS in field minimum password length. history.pushState'', '', '/'...

Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)

Stored Cross-Site Scripting XSS in field minimum password length. PoC...

WordPress Profile Builder Plugin <= 2.4.1 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Profile Builder 2.4.0 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Profile Builder WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

Profile Builder < 2.4.1 - Privilege Escalation

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Privilege Escalation security vulnerability...

WordPress Profile Builder Plugin <= 2.4.0 - Privilege Escalation

This plugin is prone to a privilege escalation vulnerability. Solution Update this plugin...

Profile Builder < 2.2.5 - XSS

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a XSS security vulnerability...

CSRF/XSS In Ultimate Profile Builder by CMSLive Wordpress Plugin

================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ultimate...

WordPress Plugin Ultimate Profile Builder Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Ultimate Profile Builder is a plugin for wordpress. A cross-site request forgery vulnerability exist...

WordPress Ultimate Profile Builder Plugin 2.3.3 - CSRF Vulnerability

Exploit for php platform in category web applications ================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ========...

WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery

WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery ================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of...

WordPress Ultimate Profile Builder Plugin 2.3.3 - CSRF

WordPress Ultimate Profile Builder plugin is prone to a cross-site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Update the plugin...