Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-02-03
CVE-2025-15030 - User Profile Builder Plugin
The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to their account
PLUGIN
User Profile Builder
CVE-2025-15030
Risk Score
Threat Entry
Updated 2025-06-04
CVE-2024-6708 - User Profile Builder Plugin
The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the admin area, which allows Admin+ users to perform Cross-Site Scripting attacks.
PLUGIN
User Profile Builder
CVE-2024-6708
Risk Score
Threat Entry
Updated 2025-05-30
CVE-2024-6366 - User Profile Builder Plugin
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.
PLUGIN
User Profile Builder
CVE-2024-6366
Risk Score