User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor, e89cfe903ca649503e8a4498e7750a50599a75c7
- CVE, Research URL
- Home page URL
- Application
-
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
- Published on
- May 06, 2014
- Research Description
- User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 1.1.60 Profile Builder – User Profile & User Registration Forms Plugin < 1.1.60 - Authentication Bypass The Profile Builder – User Profile & User Registration Forms Plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.1.59. This is due to a failure to restrict access on the password reset form. This makes it possible for unauthenticated attackers to reset passwords of user accounts, including administrator accounts.
- Affected versions
-
max 1.1.60.
- Status
-
vulnerable