Sign in Get started

← All advisories

High severity8.8NVD Advisory· Published Jan 31, 2024· Updated Apr 28, 2026

CVE-2024-22140

CVE-2024-22140

Description

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0.

Affected products

1

Cozmoslabs/Profile Builder
cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:wordpress:*:*
Range: <=3.10.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

patchstack.com/database/vulnerability/profile-builder-pro/wordpress-profile-builder-pro-plugin-3-10-0-csrf-leading-to-account-takeover-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.