Vulnerability Bulletins |
Critical Vulnerability In Profile Builder Plugin Allowed Site Takeover |
|
| Affected software | Wordpress |
|
https://www.wordfence.com/blog/2020/02/critical-vulnerability-in-profile-builder-plugin-allowed-site-takeover/ Description: Unauthenticated Administrator RegistrationAffected Plugin: Profile Builder (Free, Pro, and Hobbyist versions affected)Affected Versions: <= 3.1.0CVSS Score: 10.0 (Critical)CVSS Vector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HPatched Version: 3.1.1 Earlier this week, a critical vulnerability was patched in the Profile Builder plugin for WordPress. This vulnerability More info: https://www.wordfence.com/blog/2020/02/critical-vulnerability-in-profile-builder-plugin-allowed-site-takeover/ |
|