User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Approved changes feed: RSS · Atom
cpe:2.3:a:cozmoslabs:user_profile_builder_–_beautiful_user_registration_forms,_user_profiles_&_user_role_editor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cozmoslabs (a6cf7c48-9910-5089-9ac0-ffa6c9be99f9) |
|---|---|
| Product | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (9c270894-1c95-5773-bcf5-aa6afb5b8752) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3139 |
vulnerable | 2026-06-08 08:01:17.920961 |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field
MEDIUM (4.3)
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppb_save_avatar_value() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to reassign ownership of arbitrary posts and attachments by changing 'post_author'.
Published: 2026-03-31T11:18:56.130Z
Updated: 2026-04-08T17:01:27.016Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8896 |
vulnerable | 2026-06-08 07:45:21.425949 |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MEDIUM (6.4)
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdpr_communication_preferences[]' parameter in all versions up to, and including, 3.14.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when the GDPR Communication Preferences module is enabled and at least one GDPR Communication Preferences field has been added to the edit profile form.
Published: 2025-08-16T06:39:22.024Z
Updated: 2026-04-08T16:40:33.546Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4671 |
vulnerable | 2026-06-08 07:29:17.077365 |
Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes
MEDIUM (6.4)
The Profile Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's user_meta and compare shortcodes in all versions up to, and including, 3.13.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-06-03T11:22:25.867Z
Updated: 2026-04-08T16:45:46.207Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2314 |
vulnerable | 2026-06-08 07:16:56.777918 |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MEDIUM (6.4)
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.13.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The issue was partially patched in version 3.13.6 of the plugin, and fully patched in 3.13.7.
Published: 2025-04-16T01:45:01.798Z
Updated: 2026-04-08T17:11:29.201Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13054 |
vulnerable | 2026-06-08 07:04:31.495847 |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MEDIUM (6.4)
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wppb-embed shortcode in all versions up to, and including, 3.14.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-11-19T05:45:12.261Z
Updated: 2026-04-08T16:46:29.029Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12738 |
vulnerable | 2026-06-08 06:25:35.996941 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0324 |
vulnerable | 2026-06-08 06:22:00.338000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6504 |
vulnerable | 2026-06-08 06:19:47.502878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47669 |
vulnerable | 2026-06-08 06:14:25.341956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2297 |
vulnerable | 2026-06-08 06:02:41.997831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0814 |
vulnerable | 2026-06-08 05:52:32.877610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.