User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

Güvenlik açıkları

• CVE-2026-15826kimlik doğrulamasız≤ 3.16.4

  User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter

  Kritik 9.8

• CVE-2023-47669kimlik doğrulamasız · tıklama gerekir≤ 3.10.3

  WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-2297kimlik doğrulamasız≤ 3.9.0

  Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism

  Yüksek 8.1

• CVE-2015-9337kimlik doğrulamasız

  The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.

  Yüksek 7.5

• CVE-2026-95866kimlik doğrulamasız≤ 4.0.2

  User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field

  Yüksek 7.2

• CVE-2026-6431kimlik doğrulamasız≤ 3.15.7

  User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field

  Yüksek 7.2

• CVE-2026-96338abone+≤ 4.0.2

  WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2023-0814abone+≤ 3.9.0

  Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode

  Orta 6.5

• CVE-2026-93656abone+≤ 4.0.2

  User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field

  Orta 6.4

• CVE-2025-8896abone+≤ 3.14.3

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2026-75965katılımcı+≤ 4.0.0

  User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute

  Orta 6.4

• CVE-2025-13054katılımcı+≤ 3.14.8

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2025-4671katılımcı+≤ 3.13.8

  Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes

  Orta 6.4

• CVE-2025-2314katılımcı+≤ 3.13.6

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2026-75964kimlik doğrulamasız · tıklama gerekir≤ 4.0.0

  User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter

  Orta 6.1

• CVE-2024-12738kimlik doğrulamasız · tıklama gerekir≤ 3.12.9

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting

  Orta 6.1

• CVE-2022-0653kimlik doğrulamasız · tıklama gerekir≤ 3.6.1

  Profile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2016-10911kimlik doğrulamasız · tıklama gerekir

  The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.

  Orta 6.1

• CVE-2015-9328kimlik doğrulamasız · tıklama gerekir

  The profile-builder plugin before 2.2.5 for WordPress has XSS.

  Orta 6.1

• CVE-2014-10380kimlik doğrulamasız · tıklama gerekir

  The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.

  Orta 6.1

• CVE-2026-66701kimlik doğrulamasız≤ 3.16.5

  WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-31341kimlik doğrulamasız≤ 3.11.2

  WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability

  Orta 5.3

• CVE-2025-49292kimlik doğrulamasız · tıklama gerekir≤ 3.13.8

  WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability

  Orta 4.3

• CVE-2021-36915kimlik doğrulamasız · tıklama gerekir≤ 3.6.0

  WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2026-3139abone+≤ 3.15.5

  User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscr

  Orta 4.3

• CVE-2023-6504katılımcı+≤ 3.10.6

  Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode

  Orta 4.3