Bestwebsoft Profile Extra Fields By Bestwebsoft
2 CVEs affecting Bestwebsoft Profile Extra Fields By Bestwebsoft. Latest disclosed: 2026-08-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66456 | Medium | 6.5 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions. |
CVE-2023-4469 | Medium | 5.3 | 2023-10-06 | The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the prflxtrflds_… |