4 matches found
CVE-2014-10380
The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.
CVE-2015-9337
The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.
CVE-2015-9328
The profile-builder plugin before 2.2.5 for WordPress has XSS.
CVE-2016-10911
The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.