Skip to content
OpenAdvisories

Product · Cozmoslabs

Profile Builder

10 known vulnerabilities.

8 results · Clear filters · Feed

  • Medium 5.3

    WordPress Profile Builder plugin <= 4.0.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Profile Builder: from n/a through 4.0.6.

  • Medium 5.3

    WordPress Profile Builder plugin <= 4.0.6 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Cozmoslabs Profile Builder profile-builder allows Retrieve Embedded Sensitive Data.This issue affects Profile Builder: from n/a through 4.0.6.

  • Medium 6.3

    WordPress Profile Builder plugin <= 4.0.5 - Privilege Escalation vulnerability

    Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.

  • Medium 5.3

    WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Profile Builder: from n/a through 4.0.5.

  • Medium 6.5

    WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.

  • Medium 5.3

    WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions.

  • Medium 4.3

    WordPress Profile Builder plugin <= 3.13.8 - Content Spoofing Vulnerability

    Improper Validation of Specified Quantity in Input vulnerability in Cozmoslabs Profile Builder profile-builder allows Phishing.This issue affects Profile Builder: from n/a through <= 3.13.8.

  • Medium 5.3

    WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability

    Insufficient Verification of Data Authenticity vulnerability in Cozmoslabs Profile Builder allows Functionality Bypass.This issue affects Profile Builder: from n/a through 3.11.2.