Profile Builder
Approved changes feed: RSS · Atom
cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Cozmoslabs (a6cf7c48-9910-5089-9ac0-ffa6c9be99f9) |
|---|---|
| Product | Profile Builder (8a4296d1-abe7-5250-8029-ad22d593f75a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/profile-builder |
purl2cpe | 2026-06-01 10:15:37.027973 |
pkg:github/wpplugins/profile-builder |
purl2cpe | 2026-06-01 10:15:37.027974 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6708 |
vulnerable | 2026-06-08 06:58:20.216600 |
Profile Builder <= 3.12.0 - Admin+ Stored Cross Site Scripting
The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the admin area, which allows Admin+ users to perform Cross-Site Scripting attacks.
Published: 2025-05-15T20:07:09.159Z
Updated: 2025-05-20T19:23:48.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6695 |
vulnerable | 2026-06-08 06:58:20.183516 |
profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation
it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process.
Published: 2024-07-31T06:00:04.649Z
Updated: 2024-07-31T15:06:31.038Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6366 |
vulnerable | 2026-06-08 06:58:18.772569 |
User Profile Builder < 3.11.8 - Unauthenticated Media Upload
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.
Published: 2024-07-29T06:00:08.248Z
Updated: 2024-08-01T21:33:05.436Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31341 |
vulnerable | 2026-06-08 06:35:31.331773 |
WordPress User Profile Builder plugin <= 3.11.2 - Bypass Vulnerability vulnerability
MEDIUM (5.3)
Insufficient Verification of Data Authenticity vulnerability in Cozmoslabs Profile Builder allows Functionality Bypass.This issue affects Profile Builder: from n/a through 3.11.2.
Published: 2024-05-17T08:19:23.208Z
Updated: 2026-04-28T16:09:30.802Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22142 |
vulnerable | 2026-06-08 06:29:33.924200 |
WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile Builder Pro allows Reflected XSS.This issue affects Profile Builder Pro: from n/a through 3.10.0.
Published: 2024-01-12T23:17:20.712Z
Updated: 2026-04-28T16:09:08.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22141 |
vulnerable | 2026-06-08 06:29:33.923652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22140 |
vulnerable | 2026-06-08 06:29:33.923137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0324 |
vulnerable | 2026-06-08 06:22:00.339062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6504 |
vulnerable | 2026-06-08 06:19:47.503755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4059 |
vulnerable | 2026-06-08 06:16:11.268157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47669 |
vulnerable | 2026-06-08 06:14:25.348771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2297 |
vulnerable | 2026-06-08 06:02:41.998713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0814 |
vulnerable | 2026-06-08 05:52:32.878680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0884 |
vulnerable | 2026-06-08 05:39:11.416626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0653 |
vulnerable | 2026-06-08 05:39:10.467999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36915 |
vulnerable | 2026-06-08 05:32:52.701742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24527 |
vulnerable | 2026-06-08 05:30:04.525971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24448 |
vulnerable | 2026-06-08 05:30:04.398494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10911 |
vulnerable | 2026-06-08 05:07:25.812146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9337 |
vulnerable | 2026-06-08 05:07:13.580587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9328 |
vulnerable | 2026-06-08 05:07:13.571560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8492 |
vulnerable | 2026-06-08 05:06:08.956343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-10380 |
vulnerable | 2026-06-08 05:05:15.649689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.