CVE-2023-4059 — Profile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation
The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in an…
Published: 2023-09-04 · CVSS: 4.3 · CVSS 3.1
The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7