BestWebSoft Profile Extra Fields by BestWebSoft

• CVE-2026-66456 Medium 6.5 WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2023-4469 Medium 5.3 Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure 0.6%