CVE-2023-4059 (published 2023-09-04T11:26:55.285Z)
The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog
Affected products: Vendor: Unknown
Product: Profile Builder
Versions: 0