CVE-2023-2297
CVE-2023-2297 is a critical-severity vulnerability in Cozmoslabs Profile Builder with a CVSS 3.x base score of 9.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-620.
Key facts
- Severity: Critical (CVSS 3.x base score 9.8)
- EPSS exploit prediction: 1% (58th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-620
- Affected product: Cozmoslabs Profile Builder
- Published:
- Last modified:
Description
The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently used. An attacker can leverage CVE-2023-0814, or another vulnerability like SQL Injection in another plugin or theme installed on the site to successfully exploit this vulnerability.
Frequently asked questions
- What is CVE-2023-2297?
- The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently used. An attacker can leverage CVE-2023-0814, or another vulnerability like SQL Injection in another plugin or theme installed on the site to successfully exploit this vulnerability.
- How severe is CVE-2023-2297?
- CVE-2023-2297 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2023-2297 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (58th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-2297?
- CVE-2023-2297 affects Cozmoslabs Profile Builder. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2023-2297?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2023-2297 published?
- CVE-2023-2297 was published on 2023-04-27 and last updated on 2026-06-17.
References
- https://lana.codes/lanavdb/512e7307-04a5-4d8b-8f79-f75f37784a9f/
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2864329%40profile-builder&new=2864329%40profile-builder&sfp_email=&sfph_mail=
- https://www.wordfence.com/blog/2023/03/vulnerability-patched-in-cozmolabs-profile-builder-plugin-information-disclosure-leads-to-account-takeover/
- https://www.wordfence.com/threat-intel/vulnerabilities/id/e731292a-4f95-46eb-889e-b00d58f3444e?source=cve
Affected products (1)
- cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:wordpress:*:*
More vulnerabilities in Cozmoslabs Profile Builder
- CVE-2024-6695 — Critical (CVSS 9.8): it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and…
- CVE-2021-24527 — Critical (CVSS 9.8): The User Registration & User Profile – Profile Builder WordPress plugin before 3.4.9 has a bug allowing any user to…
- CVE-2024-6366 — Critical (CVSS 9.1): The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated…
- CVE-2024-22140 — High (CVSS 8.8): Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder…
- CVE-2024-0324 — High (CVSS 8.2): The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress…
- CVE-2015-9337 — High (CVSS 7.5): The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via…
All CVEs affecting Cozmoslabs Profile Builder →
Other CWE-620 vulnerabilities
- CVE-2024-20419 — Critical (CVSS 10.0): A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an…
- CVE-2025-1107 — Critical (CVSS 9.9): Unverified password change vulnerability in Janto, versions prior to r12. This could allow an unauthenticated attacker…
- CVE-2024-33699 — Critical (CVSS 9.9): The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers…
- CVE-2025-63362 — Critical (CVSS 9.8): Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage…
- CVE-2025-9286 — Critical (CVSS 9.8): The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing…
- CVE-2025-10159 — Critical (CVSS 9.8): An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series…