Medium
CVE-2024-6708
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 53
Reset filters
Critical
CVE-2024-6695
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.8 - Authentication Bypass
Medium
CVE-2024-6366
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.7 - Missing Authorization to Unauthenticated Media Upload
Medium
CVE-2024-31341
Profile Builder <= 3.11.2 - Restricted Email Bypass
High
CVE-2024-0324
User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update
High
CVE-2024-22140
Profile Builder Pro <= 3.10.0 - Cross-Site Request Forgery
Medium
CVE-2024-22141
Profile Builder Pro <= 3.10.0 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure
Medium
CVE-2024-22142
Profile Builder Pro <= 3.10.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-6504
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
High
CVE-2023-47669
Profile Builder <= 3.10.3 - Cross-Site Request Forgery via pms-cross-promotion.php
Medium
CVE-2023-4059
Profile Builder <= 3.9.7 - Missing Authorization to Initial Page Creation
Critical
CVE-2023-2297
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
Medium
CVE-2023-0814
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
High
CVE-2021-36915
Profile Builder – User Profile & User Registration Forms <= 3.6.4 - Cross-Site Request Forgery
Medium
CVE-2022-0884
Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0653
Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter
Critical
CVE-2021-24527
Profile Builder <= 3.4.8 - Admin Access via Password Reset
Medium
CVE-2021-24448
Profile Builder <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
502724d9-ccc4-42db-bc1e-c521f7c80e70
Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection
Critical
8fcf7283-eb6c-4fee-b606-79026e2227fc
Profile Builder <= 3.1.0 - Privilege Escalation
Medium
4364e713-8463-4088-b198-ed8237e86d42
Profile Builder < 2.5.8 - Cross-Site Scripting
Medium
CVE-2016-10911
Profile Builder – User Profile & User Registration Forms < 2.4.2 - Cross-Site Scripting
High
2caed42f-fb5b-488a-af15-f5ad3d82a68c
Profile Builder <= 2.4.0 - Privilege Escalation
Medium
CVE-2015-9328
Profile Builder – User Profile & User Registration Forms <= 2.2.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.