Login Request a demo
UP
Product
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
by cozmoslabs · last CVE Oct 24, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 1High 7Medium 11Low 0
Severity
All severities19Critical1High7Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107748
6.4
0%
Oct 16
User Profile Builder <= 4.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
Affected: through 4.0.3
CVE-2026-93656
6.4
0%
Sep 25
User Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field
Affected: through 4.0.2
CVE-2026-75965
6.4
0%
Sep 1
User Profile Builder <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date' Shortcode Attribute
Affected: through 4.0.0
CVE-2025-13054
6.4
0%
Nov 19
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 3.14.8
CVE-2025-8896
6.4
0%
Aug 16
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Affected: through 3.14.3
CVE-2025-4671
6.4
0%
Jun 3
Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes
Affected: through 3.13.8
CVE-2025-2314
6.4
0%
Apr 16
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 3.13.6
CVE-2026-75964
6.1
0%
Sep 1
User Profile Builder <= 4.0.0 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter
Affected: through 4.0.0
CVE-2024-12738
6.1
0%
Jan 7
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.9 - Unauthenticated Stored Cross-Site Scripting
Affected: through 3.12.9
CVE-2026-3139
4.3
0%
Mar 31
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field
Affected: through 3.15.5
CVE-2023-6504
4.3
0%
Jan 11
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
Affected: through 3.10.6
Showing 11