Vulnerability index

Browse CVEs

27 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Membership \& Content Restriction Paid Member Subscriptions CRITICAL 9.8
CVE-2024-12919

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentica…

Fix: 2.13.8+
Fix from $2,300 2025-01-14
Membership \& Content Restriction Paid Member Subscriptions MEDIUM 5.3
CVE-2024-11291

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Sensitive …

Fix: 2.13.5+
Fix from $1,600 2024-12-18
Membership \& Content Restriction Paid Member Subscriptions HIGH 7.3
CVE-2024-10261

The The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to arbitr…

Fix: 2.13.1+
Fix from $1,950 2024-11-09
Membership \& Content Restriction Paid Member Subscriptions MEDIUM 6.1
CVE-2024-9222

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Reflected …

Fix: 2.12.9+
Fix from $1,600 2024-10-02
Profile Builder CRITICAL 9.8
CVE-2024-6695

it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions.…

Fix: 3.11.9+
Fix from $2,300 2024-07-31
Profile Builder CRITICAL 9.1
CVE-2024-6366EPSS 29%

The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via…

Fix: 3.11.8+
Fix from $2,300 2024-07-29
Paid Membership Subscriptions HIGH 8.8
CVE-2023-51522

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member Subscriptions: from n/a throug…

Fix: after 2.10.4
Fix from $1,950 2024-03-15
Membership \& Content Restriction Paid Member Subscriptions MEDIUM 5.3
CVE-2024-1389

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthoriz…

Fix: 2.11.2+
Fix from $1,600 2024-02-29
Profile Builder HIGH 7.5
CVE-2024-0324

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized mod…

Fix: after 3.10.8
Fix from $1,950 2024-02-05
Profile Builder HIGH 8.8
CVE-2024-22140

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0.

Fix: after 3.10.0
Fix from $1,950 2024-01-31
Profile Builder HIGH 7.5
CVE-2024-22141

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: fr…

Fix: after 3.10.0
Fix from $1,950 2024-01-24
Profile Builder MEDIUM 6.1
CVE-2024-22142

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile Builder Pro allows Reflected…

Fix: after 3.10.0
Fix from $1,600 2024-01-13
Profile Builder HIGH 8.8
CVE-2023-47669

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Edi…

Fix: 3.10.4+
Fix from $1,950 2023-11-13
Profile Builder HIGH 8.1
CVE-2023-2297

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, a…

Fix: after 3.9.0
Fix from $1,950 2023-04-27
Client Portal HIGH 8.8
CVE-2023-25968

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin…

Fix: 1.1.9+
Fix from $1,950 2023-03-15
Profile Builder MEDIUM 6.5
CVE-2023-0814

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the [user_met…

Fix: after 3.9.0
Fix from $1,600 2023-02-14
Translatepress HIGH 8.8
CVE-2022-3141

The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the set…

Fix: 2.3.3+
Fix from $1,950 2022-09-19
Profile Builder MEDIUM 6.1
CVE-2022-0653

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and …

Fix: after 3.6.1
Fix from $1,600 2022-02-24
Membership \& Content Restriction Paid Member Subscriptions HIGH 8.8
CVE-2021-24728

The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and ord…

Fix: 2.4.2+
Fix from $1,950 2021-09-13
Profile Builder CRITICAL 9.8
CVE-2021-24527EPSS 8%

The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin o…

Fix: 3.4.9+
Fix from $2,300 2021-08-16
User Profile Picture MEDIUM 5.4
CVE-2021-24473

The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default aut…

Fix: 2.6.0+
Fix from $1,600 2021-08-02
User Profile Picture HIGH 7.5
CVE-2021-24170

The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functio…

Fix: 2.5.0+
Fix from $1,950 2021-04-05
Profile Builder HIGH 7.5
CVE-2015-9337

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.

Fix: 2.1.4+
Fix from $1,950 2019-08-22
Profile Builder MEDIUM 6.1
CVE-2014-10380

The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms.

Fix: 1.1.66+
Fix from $1,600 2019-08-21
Profile Builder MEDIUM 6.1
CVE-2015-9328

The profile-builder plugin before 2.2.5 for WordPress has XSS.

Fix: 2.2.5+
Fix from $1,600 2019-08-21
Profile Builder MEDIUM 6.1
CVE-2016-10911

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues.

Fix: 2.4.2+
Fix from $1,600 2019-08-21
Profile Builder MEDIUM 6.1
CVE-2014-8492

Multiple cross-site scripting (XSS) vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow r…

Fix: after 2.0.2
Fix from $1,600 2017-10-06