PB
Product
Profile Builder
26
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 3High 7Medium 16Low 0
Watch
Add Profile Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6695 | 9.8 | Jul 31 | it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions Affected: before 3.11.9 |
| CVE-2021-24527 | 9.8 | Aug 16 | The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain… Affected: before 3.4.9 |
| CVE-2024-6366 | 9.1 | Jul 29 | The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload… Affected: before 3.11.8 |
Showing 3