Medium · 5.3 CVE-2024-31341 EUVD-2024-29237GHSA-ff4w-3r3w-h925

WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: Profile Builder

Description

Insufficient Verification of Data Authenticity vulnerability in Cozmoslabs Profile Builder allows Functionality Bypass.This issue affects Profile Builder: from n/a through 3.11.2.

Affected products

Vendor	Product	Affected	Fixed
Cozmoslabs	Profile Builder	≤ 3.11.2	—

References

https://patchstack.com/database/vulnerability/profile-builder/wordpress-user-profile-builder-plugin-3-11-2-bypass-vulnerability-vulnerability?_s_id=cve vdb-entry