CVE-2021-36915

Description

References

• patchstack.com/database/vulnerability/profile-builder/wordpress-profile-builder-plugin-3-6-0-cross-site-request-forgery-csrf-vulnerability · Vendor Advisory
• wordpress.org/plugins/profile-builder · Vendor Advisory

Weitere Schwachstellen in profile builder

• CVE-2024-6708MITTEL 4.8The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the a…
• CVE-2024-6695KRITISCH 9.8it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized…
• CVE-2024-6366KRITISCH 9.1The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media …
• CVE-2024-0324HOCH 7.5The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unautho…
• CVE-2024-22140HOCH 8.8Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3…