User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor, 7ab9cafcaf741065f77bfe592e93f5bc5a7a00c3
- CVE, Research URL
- Home page URL
- Application
-
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
- Published on
- Jul 07, 2016
- Research Description
- User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.4.1 Profile Builder <= 2.4.0 - Privilege Escalation The Profile Builder plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.4.0. This makes it possible for subscriber-level attackers to elevate user roles to administrative levels, giving them full control of the website. This vulnerability only impacts websites that have registration enabled, but given that the plugin functionality is directly related to registration it is likely that the majority of websites with the plugin installed are effected.
- Affected versions
-
max 2.4.1.
- Status
-
vulnerable