CVE Database /
CVE-2023-6504
CVE · Medium
CVE-2023-6504 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.10.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-6504
|
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.10.8 |
Authorization Bypass Through User-Controlled Key |
Medium
4.3
|
< 3.10.8
|
3.10.8 |
2024-01-05 |
—
|
CVE-2023-6504
The Profile Builder plugin for WordPress contained an insecure direct object reference flaw that allowed attackers to circumvent authorization and authentication controls, potentially gaining access to restricted files, directories, or database information. This vulnerability affected versions prior to 3.10.8 and has been remediated in that release and later versions. Users should upgrade their installations to version 3.10.8 or newer to address this security issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings