User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor, CVE-2021-36915
- CVE, Research URL
- Home page URL
- Application
-
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
- Published on
- Oct 12, 2022
- Research Description
- Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder plugin <= 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on.
- Affected versions
-
Min -, max 1.1.60.
- Status
-
vulnerable