Is Profile Builder safe?

Plugin details

• Slug: profile-builder
• Requires PHP: 7.4+

Known vulnerabilities

• CVE-2022-0653 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.6.2 (XSS) · Medium
• CVE-2021-24527 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.4.9 (Auth Bypass) · Critical
• CVE-2021-24448 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.4.8 (XSS) · Medium
• CVE-2015-9337 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.1.4 (Improper Access Control) · High
• CVE-2014-10380 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 1.1.66 (XSS) · Medium

+ 42 more known vulnerabilities

• CVE-2016-10911 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.4.2 (XSS) · Medium
• CVE-2015-9328 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.2.5 (XSS) · Medium
• CVE-2014-8492 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.0.3 (XSS) · Medium
• CVE-2022-0884 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.6.8 (XSS) · Medium
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.3.3
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.1.1
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.4.2
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.4.1
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 1.1.60
• CVE-2021-36915 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.6.5 (CSRF) · Medium
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.3.3
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.1.1
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.5.8
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.4.1
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 1.1.60
• CVE-2023-0814 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.9.1 (CWE-200) · Medium
• CVE-2023-2297 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.9.1 (Auth Bypass) · High
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.5.1
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.3.3
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.1.1
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.5.8
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 2.4.1
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 1.1.60
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.9.8
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.9.8
• CVE-2023-4059 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.9.8 (CSRF) · Medium
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.10.4
• CVE-2023-47669 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.10.4 (CSRF) · Medium
• CVE-2023-6504 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.10.8 (CWE-639) · Medium
• CVE-2024-0324 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.10.9 (Improper Access Control) · High
• CVE-2024-31341 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.11.3 (CWE-345) · Medium
• CVE-2024-6695 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.11.9 (Auth Bypass) · Critical
• CVE-2024-6366 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.11.8 (Unrestricted File Upload) · Critical
• CVE-2024-12738 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.13.0 (XSS) · Medium
• CVE-2025-2314 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.13.7 (XSS) · Medium
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.12.2 (XSS) · Medium
• CVE-2025-4671 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.13.9 (XSS) · Medium
• CVE-2025-49292 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.13.9 (CWE-1284) · Medium
• CVE-2025-8896 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.14.4 (XSS) · Medium
• CVE-2025-13054 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.14.9 (XSS) · Medium
• CVE-2025-15030 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.15.2 (Privilege Escalation) · Critical
• CVE-2026-3139 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.15.6

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• Simple Local Avatars — 100000+ active installs — max PHP 8.4
• Gravatar Enhanced – Avatars, Profiles, and Privacy — 100000+ active installs — max PHP 8.4
• One User Avatar | User Profile Picture — 100000+ active installs — max PHP 8.4
• WP-Members Membership Plugin — 50000+ active installs
• Login & Register Forms – Popup | Slider | Inline | WooCommerce — 40000+ active installs