Démarrer
ÉlevéeCVSS 7.5
CVE-2026-27413Injection SQL, non authentifié, dans Profile Builder Pro (<= 3.14.0)
- Plugin
- Profile Builder Pro
- Versions
- <= 3.14.0
- CVSS
- 7.5/10
- Correctif
- 3.14.0
23 févr. 2026
LireBlog
Alertes, guideset veille WordPress.
Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.
32284
Vulnérabilités (CVE)
1
Guides publiés
186
Publiés ce mois-ci
Filtre par plugin
profile builder pro
MoyenneCVSS 5.3CVE-2025-67956Défaut de contrôle d'accès dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 4.4.6)
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- Versions
- <= 4.4.6
- CVSS
- 5.3/10
- Correctif
- 4.4.7
21 janv. 2026
Lire
CritiqueCVSS 9.8CVE-2025-15030Élévation de privilèges, non authentifié, dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.15.1)
- Plugin
- User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
- Versions
- <= 3.15.1
- CVSS
- 9.8/10
- Correctif
- 3.15.2
12 janv. 2026
LireMoyenneCVSS 5.4CVE-2025-14976CSRF (Cross-Site Request Forgery) dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 4.4.8)
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- Versions
- <= 4.4.8
- CVSS
- 5.4/10
- Correctif
- 4.4.9
9 janv. 2026
LireMoyenneCVSS 5.4CVE-2026-24353Faille de sécurité, authentifié (Abonné+), dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 4.4.9)
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- Versions
- <= 4.4.9
- CVSS
- 5.4/10
- Correctif
- 5.0
8 janv. 2026
LireMoyenneCVSS 6.4CVE-2025-13367XSS stocké, authentifié (Contributeur+), dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 4.4.6)
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- Versions
- <= 4.4.6
- CVSS
- 6.4/10
- Correctif
- 4.4.7
15 déc. 2025
Lire
MoyenneCVSS 6.8CVE-2025-13320Suppression de fichier arbitraire, authentifié (Abonné+), dans WP User Manager – User Profile Builder & Membership (<= 2.9.12)
- Plugin
- WP User Manager – User Profile Builder & Membership
- Versions
- <= 2.9.12
- CVSS
- 6.8/10
- Correctif
- 2.9.13
11 déc. 2025
LireMoyenneCVSS 6.4CVE-2025-13054XSS stocké, authentifié (Éditeur+), dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.14.8)
- Plugin
- User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
- Versions
- <= 3.14.8
- CVSS
- 6.4/10
- Correctif
- 3.14.9
18 nov. 2025
Lire
MoyenneCVSS 5.4CVE-2025-58672Défaut de contrôle d'accès dans User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (<= 4.1.12)
- Plugin
- User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
- Versions
- <= 4.1.12
- CVSS
- 5.4/10
- Correctif
- 4.1.13
22 sept. 2025
LireMoyenneCVSS 5.4CVE-2025-58673Faille de sécurité, authentifié (Abonné+), dans User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (<= 4.1.12)
- Plugin
- User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
- Versions
- <= 4.1.12
- CVSS
- 5.4/10
- Correctif
- 4.1.13
22 sept. 2025
LireÉlevéeCVSS 8.0
CVE-2025-9693Suppression de fichier arbitraire, authentifié (Abonné+), dans User Meta – User Profile Builder and User management plugin (<= 3.1.2)
- Plugin
- User Meta – User Profile Builder and User management plugin
- Versions
- <= 3.1.2
- CVSS
- 8.0/10
- Correctif
- Aucun
10 sept. 2025
LireMoyenneCVSS 4.9CVE-2025-9085Injection SQL, authentifié, dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 4.3.0)
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- Versions
- <= 4.3.0
- CVSS
- 4.9/10
- Correctif
- 4.4.0
5 sept. 2025
Lire25 – 36 sur 100 articles