← All advisories

Unrated severityNVD Advisory· Published Jun 17, 2026

WordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability

CVE-2026-42385

Description

Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Profile Builder Prollm-fuzzy
Range: <=3.15.0
Package: https://wordpress.org/plugins/profile-builder-pro

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/profile-builder-pro/vulnerability/wordpress-profile-builder-pro-plugin-3-15-0-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.