Description
Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cozmoslabs | Profile Builder Pro | ≤ 3.15.0 | — |
High · 7.1
CVE-2026-42385
EUVD-2026-37608GHSA-grcv-j4mc-5frh
WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack