← All advisories

High severity8.8NVD Advisory· Published Jan 31, 2024· Updated Apr 28, 2026

CVE-2024-22140

CVE-2024-22140

Description

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0.

Affected products

2

Cozmoslabs/Profile Builder
cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:wordpress:*:*
Range: <=3.10.0
WordPress/Profile Builder Prollm-fuzzy
Range: <=3.10.0
Package: https://wordpress.org/plugins/profile-builder-pro

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/profile-builder-pro/wordpress-profile-builder-pro-plugin-3-10-0-csrf-leading-to-account-takeover-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.