Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 16:53:27 +0000 CVE-2023-6504 — Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode https://cve.radiocsirt.org/vuln/cve-2023-6504 <p><strong>Affected:</strong> cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles &amp; User Role Editor</p> <p>The User Profile Builder – Beautiful User Registration Forms, User Profiles &amp; User Role Editor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wppb_toolbox_usermeta_handler function in all versions up to, and including, 3.10.7. This makes it possible for authenticated attackers, with contributor-level access and above, to expose sensitive information within user metadata.</p> <p><strong>Affected:</strong> cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles &amp; User Role Editor</p> <p>The User Profile Builder – Beautiful User Registration Forms, User Profiles &amp; User Role Editor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wppb_toolbox_usermeta_handler function in all versions up to, and including, 3.10.7. This makes it possible for authenticated attackers, with contributor-level access and above, to expose sensitive information within user metadata.</p> https://cve.radiocsirt.org/vuln/cve-2023-6504