User Registration & User Profile – Profile Builder

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:user_registration_&_user_profile_–_profile_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductUser Registration & User Profile – Profile Builder (0425e400-4c63-54a9-b4d3-3a364779250c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24527 vulnerable 2026-06-08 05:30:04.525932 Profile Builder < 3.4.9 - Admin Access via Password Reset
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to reset the password of the admin of the blog, and gain unauthorised access, due to a bypass in the way the reset key is checked. Furthermore, the admin will not be notified of such change by email for example.
Published: 2021-08-16T10:48:27.000Z
Updated: 2024-08-03T19:35:19.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24448 vulnerable 2026-06-08 05:30:04.397417 Profile Builder < 3.4.8 - Authenticated Stored XSS
The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue
Published: 2021-08-02T10:31:59.000Z
Updated: 2024-08-03T19:28:23.855Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.