Security Update for WordPress
A security issue has been found in the Profile Builder and Profile Builder Pro plugins, which have over 50,000 active installations. The vulnerability allows attackers to gain administrative access to a WordPress site without needing an account. This is due to inconsistencies in how the plugin processes user email information during registration.
The problem was addressed on July 11, 2024, with the release of version 3.11.9. Users of these plugins are strongly advised to update to this new version to protect their sites.
If not fixed, this vulnerability poses a serious risk, as it may allow unauthorized actions on the affected websites.
Stay secure by ensuring you have the latest version of your plugins installed!
What This Means
This issue may affect your WordPress website if you are using the mentioned plugin or theme. Immediate action is recommended to avoid security risks.
Recommended Fix
- Update the plugin or theme immediately
- Remove unnecessary plugins
- Run a full security scan
- Keep your WordPress core updated
Risk Level
This vulnerability could lead to unauthorized access if not fixed.
Source: View Original Report
