CVE-2024-22141mediumCWE-200

CVE-2024-22141: falha de média gravidade em Cozmoslabs Profile Builder Pro

WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Sensitive Data Exposure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Profile Builder Pro

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.5%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Cozmoslabs · Profile Builder Pro
CVEs relacionadas — Cozmoslabs Profile Builder Pro

No mesmo produto, das mais perigosas para as menos.

CVE-2026-7647HIGHProfile Builder Pro <= 3.14.5 - Unauthenticated PHP Object InjectionEPSS 0.5%CVE-2026-27413CRITICALWordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-22142HIGHWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-22140HIGHWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-42385HIGHWordPress Profile Builder Pro plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%