CVE-2015-9337: High severity profile builder vulnerability
Published Aug 22, 2019
·Updated
The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.
Affected Software
1 affected component
Cozmoslabs Profile Builder Wordpress<2.1.4
Event History
Aug 22, 2019
CVE Published
via MITRE·01:40 PM
Data Sourced
via MITRE·01:40 PM
Description
Frequently Asked Questions
1
What is CVE-2015-9337?
CVE-2015-9337 is a vulnerability in the profile-builder plugin before version 2.1.4 for WordPress, which allows unauthorized users to activate or deactivate addons via AJAX.
2
How severe is CVE-2015-9337?
CVE-2015-9337 has a severity rating of 7.5 (high).
3
How does CVE-2015-9337 affect WordPress sites?
CVE-2015-9337 affects WordPress sites that have the profile-builder plugin installed and running a version earlier than 2.1.4.
4
How can I fix CVE-2015-9337?
To fix CVE-2015-9337, WordPress site owners should update the profile-builder plugin to version 2.1.4 or later.
5
Where can I find more information about CVE-2015-9337?
More information about CVE-2015-9337 can be found on the official WordPress plugin page: https://wordpress.org/plugins/profile-builder/#developers