← CVE Intelligence

CVE-2023-4059

Profile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation PUBLISHED

Description (CNA)

The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog

Affected (CNA)

Vendor / productVersions
Unknown / Profile Builderaffected 0 before 3.9.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.