| CVE-2026-111966 |
The User Profile Builder WordPress plugin before 4.0.5 does not sanitise and escape one of its shortcode attributes…
|
6.8
Medium
|
Oct 23, 2026 |
| CVE-2026-111982 |
The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific…
|
7.2
High
|
Oct 23, 2026 |
| CVE-2026-111948 |
The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a…
|
7.1
High
|
Oct 21, 2026 |
| CVE-2026-76548 |
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature,…
|
8.2
High
|
Aug 29, 2026 |
| CVE-2026-76546 |
The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes,…
|
6.8
Medium
|
Aug 29, 2026 |
| CVE-2026-76547 |
The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when…
|
6.6
Medium
|
Aug 29, 2026 |
| CVE-2026-15368 |
The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after…
|
8.1
High
|
Aug 1, 2026 |
| CVE-2025-15030 |
The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few…
|
9.8
Critical
|
Feb 2, 2026 |
| CVE-2024-6708 |
The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before…
|
4.8
Medium
|
May 15, 2025 |
| CVE-2024-6695 |
it's possible for an attacker to gain administrative access without having any kind of account on the targeted site…
|
9.8
Critical
|
Jul 31, 2024 |
| CVE-2024-6366 |
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated…
|
9.1
Critical
|
Jul 29, 2024 |