My Resume Builder
My Resume Builder has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for My Resume Builder has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Ngoc Quang Bach (maysbachs). My Resume Builder is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.7.17.
CVE-2025-53336My Resume Builder <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
My Resume Builder
Author
abditsori
My Resume Builder is a wordpress plugin that helps you create and easily edit Resumes in minutes. In the Resume editor page, you have access to functionalities that allows you to enter Personal, Education History and Professional information. A WYSIWYG (What You See Is What You Get) text editor is included for you to enable you set how your Resume will be displayed after you have finished editing it in the Resume view page. Main Features Adding a contact information Attach a photo to your Resume Drag and Drop blocks to reorder them Add Education and Work History Share your Skills Share with others Project that you have worked on
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C