Unknown User Profile Builder

• CVE-2026-111982 High 7.2 Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email Change 0.3%
• CVE-2026-111966 Medium 6.8 Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode Attribute 0.3%
• CVE-2026-111948 High 7.1 Profile Builder < 4.0.1 - Reflected XSS via Unconfirmed Emails Row Actions 0.2%
• CVE-2026-76548 High 8.2 Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass 0.3%
• CVE-2026-76547 Medium 6.6 Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export 0.4%
• CVE-2026-76546 Medium 6.8 Profile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date Shortcode 0.4%
• CVE-2026-15368 High 8.1 Profile Builder < 3.16.4 - Unauthenticated Account Takeover via Auto-Login After Registration 0.4%
• CVE-2025-15030 Critical 9.8 User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset 0.5%
• CVE-2024-6708 Medium 4.8 Profile Builder <= 3.12.0 - Admin+ Stored Cross Site Scripting 0.4%
• CVE-2024-6695 Critical 9.8 profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation 0.8%
• CVE-2024-6366 Critical 9.1 User Profile Builder < 3.11.8 - Unauthenticated Media Upload 29.0%