4.3
Moyenne
CVE-2023-4059 The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which…
Description
The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Profile Builder 3.9 | premières → < 3.9.8 | 3.9.8 |