CVE-2024-22140

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/profile-builder-pro/wordpress-profile-builder-pro-plugin-3-10-0-csrf-leading-to-account-takeover-vulnerability · Third Party Advisory

Lỗ hổng khác của profile builder

• CVE-2024-6708TRUNG BÌNH 4.8The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the a…
• CVE-2024-6695NGHIÊM TRỌNG 9.8it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized…
• CVE-2024-6366NGHIÊM TRỌNG 9.1The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media …
• CVE-2024-0324CAO 7.5The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unautho…
• CVE-2024-22141CAO 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builde…