agentprime: cozmoslabs-user-profile-builder-beautiful-user-registration-forms-user-profilesEvery new CVE for cozmoslabs-user-profile-builder-beautiful-user-registration-forms-user-profiles.https://agentprime.io/CVE-2026-115807: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.3 - Authenticated (Author+) Limited Privilege Escalation via Gutenberg Block 'Assigned Role' Attributehttps://agentprime.io/advisories/CVE-2026-115807/https://agentprime.io/advisories/CVE-2026-115807/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 Oct 2026 04:32:09 GMTCVECVE-2026-100186: User Profile Builder <= 4.0.3 - Unauthenticated Stored Cross-Site Scripting via First Name Fieldhttps://agentprime.io/advisories/CVE-2026-100186/https://agentprime.io/advisories/CVE-2026-100186/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 05:30:28 GMTCVECVE-2026-109447: User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]https://agentprime.io/advisories/CVE-2026-109447/https://agentprime.io/advisories/CVE-2026-109447/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 05:30:24 GMTCVECVE-2026-107748: User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameterhttps://agentprime.io/advisories/CVE-2026-107748/https://agentprime.io/advisories/CVE-2026-107748/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 05:30:20 GMTCVECVE-2026-95866: User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Fieldhttps://agentprime.io/advisories/CVE-2026-95866/https://agentprime.io/advisories/CVE-2026-95866/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 07:40:27 GMTCVECVE-2026-93656: User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Fieldhttps://agentprime.io/advisories/CVE-2026-93656/https://agentprime.io/advisories/CVE-2026-93656/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 07:40:26 GMTCVECVE-2026-6431: User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Fieldhttps://agentprime.io/advisories/CVE-2026-6431/https://agentprime.io/advisories/CVE-2026-6431/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 12:29:05 GMTCVECVE-2026-75964: User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameterhttps://agentprime.io/advisories/CVE-2026-75964/https://agentprime.io/advisories/CVE-2026-75964/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 05:30:41 GMTCVECVE-2026-75965: User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-75965/https://agentprime.io/advisories/CVE-2026-75965/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 04:27:50 GMTCVECVE-2026-15826: User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameterhttps://agentprime.io/advisories/CVE-2026-15826/https://agentprime.io/advisories/CVE-2026-15826/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Aug 2026 06:38:09 GMTCVEcriticalCVE-2026-3139: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignme…https://agentprime.io/advisories/CVE-2026-3139/https://agentprime.io/advisories/CVE-2026-3139/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 11:18:56 GMTCVECVE-2025-13054: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2025-13054/https://agentprime.io/advisories/CVE-2025-13054/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 05:45:12 GMTCVECVE-2025-8896: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-8896/https://agentprime.io/advisories/CVE-2025-8896/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 16 Aug 2025 06:39:22 GMTCVECVE-2025-4671: Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodeshttps://agentprime.io/advisories/CVE-2025-4671/https://agentprime.io/advisories/CVE-2025-4671/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Jun 2025 11:22:25 GMTCVECVE-2025-2314: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2025-2314/https://agentprime.io/advisories/CVE-2025-2314/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Apr 2025 01:45:01 GMTCVECVE-2024-12738: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-12738/https://agentprime.io/advisories/CVE-2024-12738/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jan 2025 12:43:40 GMTCVECVE-2024-0324: User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_updatehttps://agentprime.io/advisories/CVE-2024-0324/https://agentprime.io/advisories/CVE-2024-0324/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:21:37 GMTCVECVE-2023-6504: Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcodehttps://agentprime.io/advisories/CVE-2023-6504/https://agentprime.io/advisories/CVE-2023-6504/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:33:08 GMTCVECVE-2023-47669: WordPress Profile Builder Plugin <= 3.10.3 is vulnerable to Cross Site Request Forgery (CSRF)https://agentprime.io/advisories/CVE-2023-47669/https://agentprime.io/advisories/CVE-2023-47669/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Nov 2023 00:55:27 GMTCVECVE-2023-2297: Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanismhttps://agentprime.io/advisories/CVE-2023-2297/https://agentprime.io/advisories/CVE-2023-2297/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Apr 2023 23:30:18 GMTCVEcriticalCVE-2023-0814: Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcodehttps://agentprime.io/advisories/CVE-2023-0814/https://agentprime.io/advisories/CVE-2023-0814/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Feb 2023 01:13:13 GMTCVE