← العودة للجدول
CVE-2026-75965
CVE-2026-75965 — The User Profile Builder – Beautiful User Registration Forms, User Profiles &a
📅 2026-09-01
🟡 Medium 🔥 No NVD Vulnerability WordPress CVSS 6.4

📋 الوصف الكامل

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'date' Shortcode Attribute in all versions up to, and including, 4.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and ab

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-75965

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.0.0

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←