| CVE-2026-111966 |
The User Profile Builder WordPress plugin before 4.0.5 does not sanitise and escape one of its shortcode attributes…
|
6.8
Moyenne
|
23 oct. 2026 |
| CVE-2026-111982 |
The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific…
|
7.2
Élevée
|
23 oct. 2026 |
| CVE-2026-111948 |
The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a…
|
7.1
Élevée
|
21 oct. 2026 |
| CVE-2026-76548 |
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature,…
|
8.2
Élevée
|
29 août 2026 |
| CVE-2026-76546 |
The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes,…
|
6.8
Moyenne
|
29 août 2026 |
| CVE-2026-76547 |
The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when…
|
6.6
Moyenne
|
29 août 2026 |
| CVE-2026-15368 |
The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after…
|
8.1
Élevée
|
1 août 2026 |
| CVE-2025-15030 |
The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few…
|
9.8
Critique
|
2 févr. 2026 |
| CVE-2024-6708 |
The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before…
|
4.8
Moyenne
|
15 mai 2025 |
| CVE-2024-6695 |
it's possible for an attacker to gain administrative access without having any kind of account on the targeted site…
|
9.8
Critique
|
31 juil. 2024 |
| CVE-2024-6366 |
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated…
|
9.1
Critique
|
29 juil. 2024 |