| Package | Affected versions | Patched versions |
|---|---|---|
| profile builder | < 3.4.9 | 3.4.9 |
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free