Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2015-9337

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.

  • Published: Aug 22, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-9337
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
cozmoslabs / profile_builder - 2.1.4