Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2021-36915

WordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder plugin <= 3.6.0 at WordPress allows uploading the JSON file and updating the options. Requires Import and Export add-on.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cozmoslabs Profile Builder – User Profile & User Registration Forms (WordPress plugin)

  • <= 3.6.0 to ≤ 3.6.0affected

References