CPE
The User Profile Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via improper avatar upload sanitization, allowing unauthenticated attackers to execute malicious scripts in administrative contexts.