CVE-2026-42385 Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Profile Builder Pro 3.15	premières → 3.15.0	Pas de correctif indiqué

Autres CVE de Profile Builder Pro

Les 6 CVE de Profile Builder Pro →

CVE-2026-7647 The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including… 8.1 Élevée CVE-2026-27413 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Profile… 9.3 Critique CVE-2024-22140 Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder… 8.8 Élevée CVE-2024-22141 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue… 6.5 Moyenne