| Package | Affected versions | Patched versions |
|---|---|---|
| profile builder | < 3.9.8 | 3.9.8 |
The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free