CVE-2024-6366: User Profile Builder < 3.11.8 - Unauthenticated Media Upload

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 29.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-07-29 · updated 2026-06-17
Weakness: CWE-434

Description

The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.

Affected products

cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor: before 3.11.8 — fixed in 3.11.8

How to fix

Upgrade to a fixed version: cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 3.11.8. Check the vendor advisory for mitigations.

References

https://wpscan.com/vulnerability/5b90cbdd-52cc-4e7b-bf39-bea0dd59e19e/
https://wpscan.com/vulnerability/5b90cbdd-52cc-4e7b-bf39-bea0dd59e19e/

Get alerted when CVE-2024-6366 or the next vulnerability affects your stack