Skip to content
Sign in
4.3 Medium

CVE-2023-4059 The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which…

Description

The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog

Affected products and versions

Product Affected versions Fixed in
Profile Builder 3.9 earliest → < 3.9.8 3.9.8

Other CVEs of Profile Builder

The 2 CVEs of Profile Builder →
CVE-2026-111965 The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment… 4.3 Medium
Track this CVE