356 matches found
Profile Builder < 2.4.1 - Privilege Escalation
The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Privilege Escalation security vulnerability...
WordPress Profile Builder Plugin <= 2.4.0 - Privilege Escalation
This plugin is prone to a privilege escalation vulnerability. Solution Update this plugin...
Profile Builder < 2.2.5 - XSS
The User Registration & User Profile – Profile Builder WordPress plugin was affected by a XSS security vulnerability...
WordPress Plugin Ultimate Profile Builder Cross-Site Request Forgery Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Ultimate Profile Builder is a plugin for wordpress. A cross-site request forgery vulnerability exist...
CSRF/XSS In Ultimate Profile Builder by CMSLive Wordpress Plugin
================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ultimate...
WordPress Ultimate Profile Builder Plugin 2.3.3 - CSRF Vulnerability
Exploit for php platform in category web applications ================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ========...
WordPress Ultimate Profile Builder Plugin 2.3.3 - CSRF
WordPress Ultimate Profile Builder plugin is prone to a cross-site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Update the plugin...
WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery
WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery ================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of...
WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery
================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ultimate...
WordPress Ultimate Profile Builder 2.3.3 CSRF / Cross Site Scripting
================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ultimate...
Profile Builder < 2.1.4 - Missing Access Controls
The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Missing Access Controls security vulnerability...
Profile Builder < 2.0.3 - Reflected Cross-Site Scripting (XSS)
The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
User Meta Version 1.1.1 - Arbitrary File Upload
The User Meta – User Profile Builder and User management plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability...
WordPress Profile Builder Plugin <= 1.1.59 - BYPASS
Because of this vulnerability, an attacker may exploit this issue to reset account passwords for arbitrary users which may aid in further attacks. Solution Update the plugin...
Profile Builder < 1.1.60 - Password Recovery Bypass
The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Password Recovery Bypass security vulnerability in the front-end/wppb.recover.password.php file...