Mittel
CVE-2024-6708
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 53
Filter zurücksetzen
Kritisch
CVE-2024-6695
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.8 - Authentication Bypass
Mittel
CVE-2024-6366
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.11.7 - Missing Authorization to Unauthenticated Media Upload
Mittel
CVE-2024-31341
Profile Builder <= 3.11.2 - Restricted Email Bypass
Hoch
CVE-2024-0324
User Profile Builder <= 3.10.8 - Missing Authorization to Plugin Settings Change via wppb_two_factor_authentication_settings_update
Hoch
CVE-2024-22140
Profile Builder Pro <= 3.10.0 - Cross-Site Request Forgery
Mittel
CVE-2024-22141
Profile Builder Pro <= 3.10.0 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure
Mittel
CVE-2024-22142
Profile Builder Pro <= 3.10.0 - Reflected Cross-Site Scripting
Mittel
CVE-2023-6504
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
Hoch
CVE-2023-47669
Profile Builder <= 3.10.3 - Cross-Site Request Forgery via pms-cross-promotion.php
Mittel
CVE-2023-4059
Profile Builder <= 3.9.7 - Missing Authorization to Initial Page Creation
Kritisch
CVE-2023-2297
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
Mittel
CVE-2023-0814
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
Hoch
CVE-2021-36915
Profile Builder – User Profile & User Registration Forms <= 3.6.4 - Cross-Site Request Forgery
Mittel
CVE-2022-0884
Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting
Mittel
CVE-2022-0653
Profile Builder - User Profile & User Registration Forms <= 3.6.1 - Cross-Site Scripting via site_url Parameter
Kritisch
CVE-2021-24527
Profile Builder <= 3.4.8 - Admin Access via Password Reset
Mittel
CVE-2021-24448
Profile Builder <= 3.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Hoch
502724d9-ccc4-42db-bc1e-c521f7c80e70
Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection
Kritisch
8fcf7283-eb6c-4fee-b606-79026e2227fc
Profile Builder <= 3.1.0 - Privilege Escalation
Mittel
4364e713-8463-4088-b198-ed8237e86d42
Profile Builder < 2.5.8 - Cross-Site Scripting
Mittel
CVE-2016-10911
Profile Builder – User Profile & User Registration Forms < 2.4.2 - Cross-Site Scripting
Hoch
2caed42f-fb5b-488a-af15-f5ad3d82a68c
Profile Builder <= 2.4.0 - Privilege Escalation
Mittel
CVE-2015-9328
Profile Builder – User Profile & User Registration Forms <= 2.2.4 - Reflected Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.