CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2014-8492 | User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.0.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.0.3 | 2.0.3 | 2014-10-30 | — |
The Profile Builder plugin for WordPress before version 2.0.3 contained multiple reflected XSS vulnerabilities in its fallback-page.php file that allowed attackers to execute arbitrary JavaScript or inject malicious HTML through the site_name, message, and site_url parameters.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.