CVE Database /
CVE-2023-47669
CVE · Medium
CVE-2023-47669 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.10.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-47669
|
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.10.4 |
Cross-Site Request Forgery (CSRF) |
Medium
5.4
|
< 3.10.4
|
3.10.4 |
2023-11-07 |
—
|
CVE-2023-47669
The User Profile Builder plugin for WordPress contains a cross-site request forgery vulnerability affecting versions up to 3.10.3 due to inadequate nonce verification in the wppb_activate_pms_plugin and wppb_deactivate_pms_plugin functions. An unauthenticated attacker could exploit this flaw to activate or deactivate arbitrary plugins on a site if they successfully deceive an administrator into clicking a malicious link. The vulnerability was fixed in version 3.10.4.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings