Profile & Dashboard fields [Modify/Disable/Remove]
Profile & Dashboard fields [Modify/Disable/Remove] has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Profile & Dashboard fields [Modify/Disable/Remove] has a vendor fix available, so running the current release closes it.
All of these findings were reported by WPScanTeam. Profile & Dashboard fields [Modify/Disable/Remove] is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
Profile & Dashboard fields <= 1.03 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
![Profile & Dashboard fields [Modify/Disable/Remove] banner](/_next/image?url=https%3A%2F%2Fps.w.org%2Fmodify-profile-fields-dashboard-menu-buttons%2Fassets%2Fbanner-1544x500.png%3Frev%3D2284954&w=3840&q=75)
Profile & Dashboard fields [Modify/Disable/Remove]
Author
Puvox Software
[ ✅ 𝐒𝐄𝐂𝐔𝐑𝐄 𝐏𝐋𝐔𝐆𝐈𝐍𝐒 b𝓎 𝒫𝓊𝓋𝑜𝓍 ] : • Revised for security to be reliable and free of vulnerability holes. • Efficient, not to add any extra load/slowness to site. • Don’t collect private data. Plugin Description Activate the plugin to prevent users from changing their Profile or Dashboard fields. Only admins (with role “create_users”) can change the selected fields. Available Options See available options and their description on plugin’s settings page.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C