User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

Уязвимости

• CVE-2026-15826без авторизации≤ 3.16.4

  User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter

  Критич. 9.8

• CVE-2023-47669без авторизации · нужен клик≤ 3.10.3

  WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2023-2297без авторизации≤ 3.9.0

  Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism

  Высокий 8.1

• CVE-2015-9337без авторизации

  The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.

  Высокий 7.5

• CVE-2026-95866без авторизации≤ 4.0.2

  User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field

  Высокий 7.2

• CVE-2026-6431без авторизации≤ 3.15.7

  User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field

  Высокий 7.2

• CVE-2026-96338подписчик+≤ 4.0.2

  WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2023-0814подписчик+≤ 3.9.0

  Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode

  Средний 6.5

• CVE-2026-93656подписчик+≤ 4.0.2

  User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field

  Средний 6.4

• CVE-2025-8896подписчик+≤ 3.14.3

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2026-75965участник+≤ 4.0.0

  User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute

  Средний 6.4

• CVE-2025-13054участник+≤ 3.14.8

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2025-4671участник+≤ 3.13.8

  Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes

  Средний 6.4

• CVE-2025-2314участник+≤ 3.13.6

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2026-75964без авторизации · нужен клик≤ 4.0.0

  User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter

  Средний 6.1

• CVE-2024-12738без авторизации · нужен клик≤ 3.12.9

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting

  Средний 6.1

• CVE-2022-0653без авторизации · нужен клик≤ 3.6.1

  Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2016-10911без авторизации · нужен клик

  The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.

  Средний 6.1

• CVE-2015-9328без авторизации · нужен клик

  The profile-builder plugin before 2.2.5 for WordPress has XSS.

  Средний 6.1

• CVE-2014-10380без авторизации · нужен клик

  The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.

  Средний 6.1

• CVE-2026-66701без авторизации≤ 3.16.5

  WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-31341без авторизации≤ 3.11.2

  WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability

  Средний 5.3

• CVE-2025-49292без авторизации · нужен клик≤ 3.13.8

  WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability

  Средний 4.3

• CVE-2021-36915без авторизации · нужен клик≤ 3.6.0

  WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability

  Средний 4.3

• CVE-2026-3139подписчик+≤ 3.15.5

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscr

  Средний 4.3

• CVE-2023-6504участник+≤ 3.10.6

  Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode

  Средний 4.3