Known vulnerabilities in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Powerful user profile plugin to create front-end user registration forms, login & user profile forms. Includes user role editor & content restriction.
39Reported vulnerabilities
9.8Highest CVSS score
4.0.0Latest version
40,000+Active installs
What to do now
Update User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor to 4.0.1 or later.
39 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2024-6366 | Critical | 29.0% | Before 3.11.8 | 3.11.8 |
July 29, 2024 |
| CVE-2021-24527 | Critical | 7.6% | Before 3.4.9 | 3.4.9 |
August 16, 2021 |
| CVE-2023-2297 | High | 1.0% | 3.9.0 and earlier | 3.9.1 |
April 27, 2023 |
| CVE-2026-15826 | Critical | 3.9% | 0 to 3.16.4 (inclusive) | 3.16.5 |
August 15, 2026 |
| CVE-2022-0653 | Medium | 2.7% | 3.6.1 and earlier | 3.6.2 |
February 24, 2022 |
| CVE-2014-8492 | Medium | 1.2% | 2.0.2 and earlier | 2.0.3 |
October 6, 2017 |
| CVE-2024-6695 | Critical | 0.8% | 3.11.8 and earlier | 3.11.9 |
July 10, 2024 |
| CVE-2025-15030 | Critical | 0.5% | 3.15.1 and earlier | 3.15.2 |
January 12, 2026 |
| WF-c62d8146-e4b1-4c86-9d8a-c3a9bbfb0763 | Critical | — | Before 1.1.60 | 1.1.60 |
May 6, 2014 |
| CVE-2024-6708 | Medium | 0.3% | Before 3.12.2 | 3.12.2 |
May 15, 2025 |
| CVE-2022-0884 | Medium | 0.7% | Before 3.6.8 | 3.6.8 |
April 4, 2022 |
| CVE-2021-24448 | Medium | 0.6% | Before 3.4.8 | 3.4.8 |
August 2, 2021 |
| WF-2caed42f-fb5b-488a-af15-f5ad3d82a68c | High | — | Before 2.4.1 | 2.4.1 |
July 7, 2016 |
| CVE-2024-0324 | High | 2.4% | 3.10.8 and earlier | 3.10.9 |
February 5, 2024 |
| CVE-2015-9337 | High | 1.3% | Before 2.1.4 | 2.1.4 |
August 22, 2019 |
| CVE-2026-15368 | High | 0.2% | 3.16.3 and earlier | 3.16.4 |
July 17, 2026 |
| CVE-2023-47669 | High | 0.3% | 3.10.3 and earlier | 3.10.4 |
November 7, 2023 |
| CVE-2023-0814 | Medium | 0.8% | 3.9.0 and earlier | 3.9.1 |
February 14, 2023 |
| CVE-2026-76547 | Medium | 0.2% | Before 4.0.1 | 4.0.1 |
August 29, 2026 |
| CVE-2025-4671 | Medium | 0.3% | 0 to 3.13.8 (inclusive) | 3.13.9 |
June 3, 2025 |
| CVE-2025-2314 | Medium | 0.3% | 0 to 3.13.6 (inclusive) | 3.13.7 |
April 16, 2025 |
| CVE-2026-75965 | Medium | 0.2% | 0 to 4.0.0 (inclusive) | 4.0.1 |
September 1, 2026 |
| CVE-2026-76546 | Medium | 0.2% | Before 4.0.1 | 4.0.1 |
August 29, 2026 |
| CVE-2025-13054 | Medium | 0.2% | 0 to 3.14.8 (inclusive) | 3.14.9 |
November 19, 2025 |
| CVE-2025-8896 | Medium | 0.2% | 3.14.3 and earlier | 3.14.4 |
August 15, 2025 |
| CVE-2016-10911 | Medium | 0.9% | Before 2.4.2 | 2.4.2 |
August 21, 2019 |
| CVE-2015-9328 | Medium | 0.9% | Before 2.2.5 | 2.2.5 |
August 21, 2019 |
| CVE-2014-10380 | Medium | 0.9% | Before 1.1.66 | 1.1.66 |
August 21, 2019 |
| CVE-2026-75964 | Medium | 0.2% | 0 to 4.0.0 (inclusive) | 4.0.1 |
September 1, 2026 |
| CVE-2024-12738 | Medium | 0.4% | 0 to 3.12.9 (inclusive) | 3.13.0 |
January 7, 2025 |
| WF-4364e713-8463-4088-b198-ed8237e86d42 | Medium | — | Before 2.5.8 | 2.5.8 |
March 10, 2017 |
| CVE-2026-76548 | Medium | 0.2% | Before 4.0.1 | 4.0.1 |
August 31, 2026 |
| CVE-2026-66701 | Medium | 0.2% | 3.16.5 and earlier | 3.16.6 |
July 29, 2026 |
| CVE-2025-49292 | Medium | 0.3% | 3.13.8 and earlier | 3.13.9 |
June 5, 2025 |
| CVE-2024-31341 | Medium | 0.2% | 3.11.2 and earlier | 3.11.3 |
April 5, 2024 |
| CVE-2026-3139 | Medium | 0.2% | 0 to 3.15.5 (inclusive) | 3.15.6 |
March 31, 2026 |
| CVE-2023-6504 | Medium | 0.3% | 3.10.7 and earlier | 3.10.8 |
January 11, 2024 |
| CVE-2023-4059 | Medium | 0.2% | Before 3.9.8 | 3.9.8 |
September 4, 2023 |
| CVE-2021-36915 | Medium | 0.3% | 3.6.0 and earlier | 3.6.5 |
October 11, 2022 |