Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Profile Builder – User Profile & User Registration Forms 2.0.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: October 30, 2014

The Profile Builder plugin for WordPress contained security flaws that allowed malicious people to put unauthorized web scripts or HTML code into the plugin. This was possible by using the parameters “”site_name”

Detected in:

Profile Builder – User Profile & User Registration Forms fixed vulnerable versions: >= * <= 2.0.2
User Profile Builder – Beautiful User Registration Forms & User Profiles fixed vulnerable versions:
User Profile Builder – Beautiful User Registration Forms, User Profile & User Role Editor fixed vulnerable versions:
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.