194 matches found
WordPress User Profile Builder plugin < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover vulnerability
Multisite Subsite Admin+ Network Super Admin Account Takeover vulnerability discovered by Szymon Szymkowiak in WordPress Plugin Profile Builder versions 4.0.5...
WordPress User Profile Builder plugin < 4.0.5 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Jacek Sowiński in WordPress Plugin Profile Builder versions 4.0.5...
WordPress User Profile Builder permission and access control issue vulnerability
WordPress User Profile Builder versions 4.0.4 and earlier contain a privilege escalation vulnerability related to permission handling and access control. This issue stems from improper permission allocation and may lead to privilege escalation...
WordPress User Profile Builder plugin < 4.0.1 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by 0xBassia in WordPress Plugin Profile Builder versions 4.0.1...
WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation vulnerability
Authenticated Author+ Limited Privilege Escalation vulnerability discovered by pbsec in WordPress Plugin Profile Builder versions = 4.0.3...
WordPress User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Kuba in WordPress Plugin User Registration versions = 5.2.8...
WordPress User Registration & Membership: Cross-site Script Vulnerabilities
WordPress User Registration & Membership versions 5.2.8 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for checkbox field values. Additionally, the userregistrationuserformsubmit AJAX operation does not perform...
WordPress User Registration & Membership Cross-Site Request Forgery Vulnerability
WordPress User Registration & Membership versions 5.2.8 and earlier have a cross-site request forgeing vulnerability. This vulnerability stems from a lack of proper nonce validation in the triggerbulkaction function. Attackers can bypass the nonce check in triggerqueryactions by providing an empt...
WordPress User Registration & Membership Code Injection Vulnerability
WordPress User Registration & Membership versions 5.2.8 and earlier have a code injection vulnerability. This vulnerability stems from insufficient input cleaning of the referrerurl parameter, which may allow unauthenticated attackers to execute arbitrary registered shortcodes...
WordPress User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by andrea bocchetti in WordPress Plugin User Registration & Membership Pro versions = 6.2.9...
WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin Profile Builder versions = 4.0.3...
WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by whale120 in WordPress Plugin Profile Builder versions = 4.0.3...
WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter vulnerability
Unauthenticated Privilege Escalation to 'role' Parameter vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Profile Builder versions = 4.0.3...
WordPress User Registration & Membership plugin <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name vulnerability
Authenticated Subscriber+ Arbitrary Shortcode Execution via displayname vulnerability discovered by hashiramasenju333 in WordPress Plugin User Registration versions = 5.2.8...
WordPress User Profile Builder has vulnerabilities related to permissions and access control.
WordPress User Profile Builder 4.0.3 and earlier versions have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from the activation function wppbaddmetatouseronactivation, which lacks validation for the role parameter before it is directly passed to...
WordPress User Profile Builder Cross-Site Script Vulnerability
WordPress User Profile Builder 4.0.3 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the displayname parameter input and inadequate escaping of output data, making it susceptible to stored-cross-site scripting attacks. Attacke...
WordPress User Profile Builder Cross-Site Script Vulnerability
WordPress User Profile Builder 4.0.3 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the First Name field, resulting in a storage-based cross-site script. Unauthenticated attackers can inject any web...
WordPress User Registration & Membership Code Injection Vulnerability
WordPress User Registration & Membership versions 5.2.8 and earlier have a code injection vulnerability. This vulnerability arises from the software failing to properly validate values before executing doshortcode. As a result, authenticated attackers with access at the subscriber level or higher...
CVE-2026-105882 WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8...
