4.2 Medium

CVE-2021-36915 Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder…

Description

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder plugin <= 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on.

Affected products and versions

Product	Affected versions	Fixed in
Profile Builder – User Profile & User Registration Forms (WordPress plugin) 3.6	earliest → 3.6.0	No fix stated

Do you use Profile Builder – User Profile & User Registration Forms (WordPress plugin)?

Track this CVE Watch Profile Builder – User Profile & User Registration Forms (WordPress plugin) Check my SBOMs

www.cveye.io/en/cve/CVE-2021-36915

Timeline

Published October 11, 2022
Last modified April 28, 2026

References

patchstack.com patchstack.com
wordpress.org wordpress.org

Track this CVE