Known vulnerabilities in the Profile Builder plugin
19 security advisories have been published for the Profile Builder plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Profile Builder - Security Vulnerability (CVE-2026-75964) MEDIUM
- Profile Builder - Security Vulnerability (CVE-2026-75965) MEDIUM
- Profile Builder Plugin - Arbitrary File Upload (CVE-2026-82607) MEDIUM
- Profile Builder - Authentication Bypass (CVE-2026-15826) CRITICAL
- Profile Builder - Broken Access Control (CVE-2026-66701) MEDIUM
- Profile Builder - Cross-Site Scripting (XSS) (CVE-2025-4671) MEDIUM
- Profile Builder - Cross-Site Scripting (XSS) (CVE-2024-6708) MEDIUM
- Profile Builder - Cross-Site Scripting (XSS) (CVE-2025-2314) MEDIUM
- Profile Builder - Cross-Site Scripting (XSS) (CVE-2024-12738) MEDIUM
- Profile Builder - Security Vulnerability (CVE-2024-6366) CRITICAL
- Profile Builder - Broken Access Control (CVE-2024-0324) HIGH
- Profile Builder - Information Disclosure (CVE-2023-6504) MEDIUM
- Profile Builder - Cross-Site Request Forgery (CSRF) (CVE-2023-4059) MEDIUM
- Profile Builder - SQL Injection (CVE-2023-2297) CRITICAL
- Profile Builder - Information Disclosure (CVE-2023-0814) MEDIUM
- Profile Builder - Cross-Site Request Forgery (CSRF) (CVE-2021-36915) MEDIUM
- Profile Builder - Cross-Site Scripting (XSS) (CVE-2022-0884) MEDIUM
- Profile Builder - Cross-Site Scripting (XSS) (CVE-2022-0653) MEDIUM
- Profile Builder - Security Vulnerability (CVE-2021-24527) CRITICAL
- Profile Builder - Cross-Site Scripting (XSS) (CVE-2021-24448) MEDIUM