Cozmoslabs Profile Builder Content Spoofing Vulnerability

A content spoofing vulnerability has been identified in the Cozmoslabs Profile Builder WordPress plugin, affecting versions through 3.13.8. This vulnerability allows phishing by improperly validating specified quantities in user input, potentially enabling malicious actors to inject deceptive content into website pages and posts.

Impact

Exploitation of this vulnerability could lead to unauthorized content injection, allowing for the creation of phishing pages on the affected website.

Remediation

Users of the Profile Builder WordPress plugin should update to version 3.13.9 or later to address this vulnerability.