N/A
2026-10-21< 4.0.1
CVE-2026-111948
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Minimum safe version
4.0.4
Update to 4.0.4 or later to address 61 fixable vulnerabilities
Latest available4.0.5 ✓⚠ 1 vulnerability has no fix
Medium 6.4
2026-10-16< 4.0.4
CVE-2026-107748
High 7.2
2026-10-16< 4.0.4
CVE-2026-100186
High 8.1
2026-10-16< 4.0.4
CVE-2026-109447
Medium 6.5
2026-09-30< 4.0.3
CVE-2026-96338
High 7.2
2026-09-25< 4.0.3
CVE-2026-95866
Medium 6.4
2026-09-25< 4.0.3
CVE-2026-93656
High 7.3 Unfixed
2026-08-31≤ 3.16.1
CVE-2026-82607
High 7.2
2026-09-07< 3.15.8
CVE-2026-6431
Medium 6.1
2026-09-01< 4.0.1
CVE-2026-75964
Medium 6.4
2026-09-01< 4.0.1
CVE-2026-75965
N/A
2026-08-31< 4.0.1
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
N/A
2026-08-31< 4.0.1
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Authenticated (Administrator+) PHP Object Injection
N/A
2026-08-31< 4.0.1
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Missing Authorization
Critical 9.8
2026-08-15< 3.16.5
CVE-2026-15826
Medium 5.3
2026-08-06< 3.16.6
CVE-2026-66701
N/A
2026-08-01< 3.16.4
CVE-2026-15368
N/A
2026-03-30< 3.15.6
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field
Critical 9.8
2026-02-02< 3.15.2
CVE-2025-15030
Medium 6.4
2025-11-19< 3.14.9
CVE-2025-13054
Medium 6.4
2025-08-16< 3.14.4
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium 4.3
2025-06-06< 3.13.9
CVE-2025-49292
Medium 6.4
2025-06-03< 3.13.9
Profile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes
Medium 4.8
2025-05-15< 3.12.2
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium 6.4
2025-04-16< 3.13.7
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium 6.1
2025-01-07< 3.13.0
CVE-2024-12738
Critical 9.1
2024-07-29< 3.11.8
CVE-2024-6366
Critical 9.8
2024-07-31< 3.11.9
CVE-2024-6695
Medium 5.3
2024-05-17< 3.11.3
CVE-2024-31341
High 7.5
2024-02-05< 3.10.9
CVE-2024-0324
Medium 4.3
2024-01-11< 3.10.8
CVE-2023-6504
Medium 5.4
2023-11-13< 3.10.4
CVE-2023-47669
N/A
2023-08-09< 3.9.8
WordPress Profile Builder Plugin < 3.9.8 is vulnerable to Broken Access Control
Medium 4.3
2023-09-04< 3.9.8
CVE-2023-4059
N/A
< 1.1.60
Profile Builder < 1.1.60 - Password Recovery Bypass
N/A
< 2.4.1
Profile Builder < 2.4.1 - Privilege Escalation
N/A
< 2.5.8
Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)
N/A
< 3.1.1
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
N/A
< 3.3.3
Profile Builder & Profile Builder Pro < 3.3.3 - Authenticated Blind SQL Injection
N/A
< 3.5.1
Profile Builder < 3.5.1 - Reflected Cross-Site Scripting
High 8.1
2023-04-27< 3.9.1
WordPress Profile Builder Plugin <= 3.9.0 is vulnerable to Sensitive Data Exposure
Medium 6.5
2023-02-14< 3.9.1
CVE-2023-0814
N/A
2014-05-06< 1.1.60
Profile Builder – User Profile & User Registration Forms Plugin < 1.1.60 - Authentication Bypass
N/A
2016-07-07< 2.4.1
Profile Builder <= 2.4.0 - Privilege Escalation
N/A
2017-03-10< 2.5.8
Profile Builder < 2.5.8 - Cross-Site Scripting
N/A
2020-02-13< 3.1.1
Profile Builder <= 3.1.0 - Privilege Escalation
N/A
2020-12-04< 3.3.3
Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection
Medium 4.2
2022-10-11< 3.6.5
CVE-2021-36915
N/A
2014-08-01< 1.1.60
WordPress Profile Builder Plugin <= 1.1.59 - BYPASS
N/A
2016-07-08< 2.4.1
WordPress Profile Builder Plugin <= 2.4.0 - Privilege Escalation
N/A
2016-07-13< 2.4.2
WordPress Profile Builder Plugin <= 2.4.1 - Reflected Cross Site Scripting
N/A
2020-02-10< 3.1.1
WordPress Profile Builder plugin <= 3.1.0 - User Registration With Administrator Role vulnerability
N/A
2020-12-02< 3.3.3
WordPress Profile Builder plugin <= 3.3.2 - Authenticated Blind SQL Injection (SQLi) vulnerability
Medium 4.8
2022-04-04< 3.6.8
CVE-2022-0884
Medium 6.1
2017-10-06< 2.0.3
CVE-2014-8492
Medium 6.1
2019-08-21< 2.2.5
CVE-2015-9328
Medium 6.1
2019-08-21< 2.4.2
CVE-2016-10911
Medium 6.1
2019-08-21< 1.1.66
CVE-2014-10380
High 7.5
2019-08-22< 2.1.4
CVE-2015-9337
Medium 4.8
2021-08-02< 3.4.8
CVE-2021-24448
Critical 9.8
2021-08-16< 3.4.9
CVE-2021-24527
Medium 6.1
2022-02-24< 3.6.2
CVE-2022-0653