CVE-2014-8492: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...

PT-2017-6241

Name of the Vulnerable Software and Affected Versions Profile Builder plugin versions prior to 2.0.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the site name, message, or site url parameters in the assets/misc/fallback-page.php file. Recommendations F...

Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)

Stored Cross-Site Scripting XSS in field minimum password length. history.pushState'', '', '/'...

Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)

Stored Cross-Site Scripting XSS in field minimum password length. PoC...

WordPress Profile Builder Plugin <= 2.4.1 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Profile Builder 2.4.0 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Profile Builder WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

Profile Builder < 2.4.1 - Privilege Escalation

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Privilege Escalation security vulnerability...

WordPress Profile Builder Plugin <= 2.4.0 - Privilege Escalation

This plugin is prone to a privilege escalation vulnerability. Solution Update this plugin...

Profile Builder < 2.2.5 - XSS

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a XSS security vulnerability...

WordPress Plugin Ultimate Profile Builder Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Ultimate Profile Builder is a plugin for wordpress. A cross-site request forgery vulnerability exist...

CSRF/XSS In Ultimate Profile Builder by CMSLive Wordpress Plugin

================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ultimate...

WordPress Ultimate Profile Builder Plugin 2.3.3 - CSRF Vulnerability

Exploit for php platform in category web applications ================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ========...

WordPress Ultimate Profile Builder Plugin 2.3.3 - CSRF

WordPress Ultimate Profile Builder plugin is prone to a cross-site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Update the plugin...

WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery

WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery ================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of...

WordPress Plugin Ultimate Profile Builder 2.3.3 - Cross-Site Request Forgery

================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ultimate...

WordPress Ultimate Profile Builder 2.3.3 CSRF / Cross Site Scripting

================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ultimate...

Profile Builder < 2.1.4 - Missing Access Controls

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Missing Access Controls security vulnerability...

Profile Builder < 2.0.3 - Reflected Cross-Site Scripting (XSS)

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

User Meta Version 1.1.1 - Arbitrary File Upload

The User Meta – User Profile Builder and User management plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Profile Builder < 1.1.60 - Password Recovery Bypass

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Password Recovery Bypass security vulnerability in the front-end/wppb.recover.password.php file...