agentprime: user-profile-builderEvery new CVE for user-profile-builder.https://agentprime.io/CVE-2026-111982: Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Changehttps://agentprime.io/advisories/CVE-2026-111982/https://agentprime.io/advisories/CVE-2026-111982/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 06:00:19 GMTCVECVE-2026-111966: Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attributehttps://agentprime.io/advisories/CVE-2026-111966/https://agentprime.io/advisories/CVE-2026-111966/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 06:00:19 GMTCVECVE-2026-111948: Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actionshttps://agentprime.io/advisories/CVE-2026-111948/https://agentprime.io/advisories/CVE-2026-111948/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 06:00:22 GMTCVECVE-2026-76548: Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypasshttps://agentprime.io/advisories/CVE-2026-76548/https://agentprime.io/advisories/CVE-2026-76548/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Aug 2026 06:00:20 GMTCVECVE-2026-76547: Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Exporthttps://agentprime.io/advisories/CVE-2026-76547/https://agentprime.io/advisories/CVE-2026-76547/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Aug 2026 06:00:20 GMTCVECVE-2026-76546: Profile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date Shortcodehttps://agentprime.io/advisories/CVE-2026-76546/https://agentprime.io/advisories/CVE-2026-76546/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Aug 2026 06:00:20 GMTCVECVE-2026-15368: Profile Builder < 3.16.4 - Unauthenticated Account Takeover via Auto-Login After Registrationhttps://agentprime.io/advisories/CVE-2026-15368/https://agentprime.io/advisories/CVE-2026-15368/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 06:00:09 GMTCVECVE-2025-15030: User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Resethttps://agentprime.io/advisories/CVE-2025-15030/https://agentprime.io/advisories/CVE-2025-15030/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 06:00:01 GMTCVEcriticalCVE-2024-6708: Profile Builder <= 3.12.0 - Admin+ Stored Cross Site Scriptinghttps://agentprime.io/advisories/CVE-2024-6708/https://agentprime.io/advisories/CVE-2024-6708/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 May 2025 20:07:09 GMTCVECVE-2024-6695: profile-builder <= 3.11.8 - Unauthenticated Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-6695/https://agentprime.io/advisories/CVE-2024-6695/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Jul 2024 06:00:04 GMTCVEcriticalCVE-2024-6366: User Profile Builder < 3.11.8 - Unauthenticated Media Uploadhttps://agentprime.io/advisories/CVE-2024-6366/https://agentprime.io/advisories/CVE-2024-6366/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.29 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jul 2024 06:00:08 GMTCVEcritical