CyberRota Analysis
AI-GeneratedThe Cozmoslabs Profile Builder Plugin for WordPress versions up to 3.16.1 is vulnerable due to an unrestricted file upload flaw in the wppb_ajax_simple_avatar function, allowing remote attackers to upload malicious files. This poses a significant risk as it could lead to unauthorized access or compromise of the WordPress site. WordPress administrators using this plugin should prioritize upgrading to version 3.16.2 to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppb_ajax_simple_avatar of the file /wp-admin/admin-ajax.php of the component Avatar Simple Upload AJAX Handler. Performing a manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 3.16.2 is sufficient to resolve this issue. It is suggested to upgrade the affected component.