Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-47669 EUVD-2023-51768GHSA-pc7h-cpmv-65jh

WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)

Published Nov 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

Description

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin <= 3.10.3 versions.

Affected products

VendorProductAffectedFixed
Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor ≤ 3.10.3 —

References