Browse CVEs

CRITICAL 9.8 CVE-2024-12919 The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentica… Membership \& Content Restriction Paid Member Subscriptions 2.13.8+ Fix from $2,3002025-01-14 MEDIUM 5.3 CVE-2024-11291 The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Sensitive … Membership \& Content Restriction Paid Member Subscriptions 2.13.5+ Fix from $1,6002024-12-18 HIGH 7.3 CVE-2024-10261 The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitr… Membership \& Content Restriction Paid Member Subscriptions 2.13.1+ Fix from $1,9502024-11-09 MEDIUM 6.1 CVE-2024-9222 The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Reflected … Membership \& Content Restriction Paid Member Subscriptions 2.12.9+ Fix from $1,6002024-10-02 CRITICAL 9.8 CVE-2024-6695 it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions.… Profile Builder 3.11.9+ Fix from $2,3002024-07-31 CRITICAL 9.1 CVE-2024-6366EPSS 29% The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via… Profile Builder 3.11.8+ Fix from $2,3002024-07-29 HIGH 8.8 CVE-2023-51522 Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member Subscriptions: from n/a throug… Paid Membership Subscriptions after 2.10.4 Fix from $1,9502024-03-15 MEDIUM 5.3 CVE-2024-1389 The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthoriz… Membership \& Content Restriction Paid Member Subscriptions 2.11.2+ Fix from $1,6002024-02-29 HIGH 7.5 CVE-2024-0324 The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized mod… Profile Builder after 3.10.8 Fix from $1,9502024-02-05 HIGH 8.8 CVE-2024-22140 Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0. Profile Builder after 3.10.0 Fix from $1,9502024-01-31 HIGH 7.5 CVE-2024-22141 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: fr… Profile Builder after 3.10.0 Fix from $1,9502024-01-24 MEDIUM 6.1 CVE-2024-22142 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile Builder Pro allows Reflected… Profile Builder after 3.10.0 Fix from $1,6002024-01-13 HIGH 8.8 CVE-2023-47669 Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Edi… Profile Builder 3.10.4+ Fix from $1,9502023-11-13 HIGH 8.1 CVE-2023-2297 The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, a… Profile Builder after 3.9.0 Fix from $1,9502023-04-27 HIGH 8.8 CVE-2023-25968 Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin… Client Portal 1.1.9+ Fix from $1,9502023-03-15 MEDIUM 6.5 CVE-2023-0814 The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the [user_met… Profile Builder after 3.9.0 Fix from $1,6002023-02-14 HIGH 8.8 CVE-2022-3141 The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the set… Translatepress 2.3.3+ Fix from $1,9502022-09-19 MEDIUM 6.1 CVE-2022-0653 The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and … Profile Builder after 3.6.1 Fix from $1,6002022-02-24 HIGH 8.8 CVE-2021-24728 The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and ord… Membership \& Content Restriction Paid Member Subscriptions 2.4.2+ Fix from $1,9502021-09-13 CRITICAL 9.8 CVE-2021-24527EPSS 8% The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin o… Profile Builder 3.4.9+ Fix from $2,3002021-08-16 MEDIUM 5.4 CVE-2021-24473 The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default aut… User Profile Picture 2.6.0+ Fix from $1,6002021-08-02 HIGH 7.5 CVE-2021-24170 The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functio… User Profile Picture 2.5.0+ Fix from $1,9502021-04-05 HIGH 7.5 CVE-2015-9337 The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX. Profile Builder 2.1.4+ Fix from $1,9502019-08-22 MEDIUM 6.1 CVE-2014-10380 The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms. Profile Builder 1.1.66+ Fix from $1,6002019-08-21 MEDIUM 6.1 CVE-2015-9328 The profile-builder plugin before 2.2.5 for WordPress has XSS. Profile Builder 2.2.5+ Fix from $1,6002019-08-21 MEDIUM 6.1 CVE-2016-10911 The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues. Profile Builder 2.4.2+ Fix from $1,6002019-08-21 MEDIUM 6.1 CVE-2014-8492 Multiple cross-site scripting (XSS) vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow r… Profile Builder after 2.0.2 Fix from $1,6002017-10-06