Known vulnerabilities in User registration & user profile - Profile Builder

Vendor: Cozmoslabs
Software CPE: cpe:2.3:a:reflectionmedia:profile-builder:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting User registration & user profile - Profile Builder User registration & user profile - Profile Builder is affected by 5 known vulnerabilities: 1 high, 4 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25114 - Improper Authentication
CWE-287 High
No
No
3.1.1 11.02.2020 SB2020021101
#VU20734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9328
CWE-79 Low
No
No
2.2.5 02.09.2019 SB2015111101
#VU20688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.4.2 02.09.2019 SB2016071315
#VU20635 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.5.8 02.09.2019 SB2017031003
#VU19890 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-8492
CWE-79 Low
No
No
2.0.3 02.08.2019 SB2014103001