CV Builder – Professional Resume Builder SaaS Security & Risk Analysis

wordpress.org/plugins/cv-builder

Transform your WordPress site into a PROFITABLE resume-building SaaS platform! Create, customize, and monetize professional resumes with ease.

40 active installs v1.3.6 PHP 7.0+ WP 5.7+ Updated Apr 15, 2026
buildercvportfolioresumesaas
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is CV Builder – Professional Resume Builder SaaS Safe to Use in 2026?

Generally Safe

Score 100/100

CV Builder – Professional Resume Builder SaaS has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "cv-builder" plugin version 1.3.4 exhibits a mixed security posture. On the positive side, it shows no recorded vulnerabilities in its history and utilizes prepared statements for all SQL queries, which is a strong indicator of good database security practices. The taint analysis also reveals no critical or high-severity issues related to unsanitized data flows. However, the plugin presents significant concerns regarding its attack surface, particularly with AJAX handlers. A substantial number of AJAX endpoints (10 out of 17) lack authentication checks, creating potential entry points for unauthorized actions. Furthermore, while the plugin has many output operations, only 57% are properly escaped, suggesting a risk of cross-site scripting (XSS) vulnerabilities in various contexts where user-supplied data might be displayed.

Key Concerns

  • Unprotected AJAX handlers
  • Insufficient output escaping
Vulnerabilities
None known

CV Builder – Professional Resume Builder SaaS Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

CV Builder – Professional Resume Builder SaaS Release Timeline

v1.3.6Current
v1.3.5
v1.3.4
v1.3.3
v1.3.2
v1.3.1
v1.3.0
v1.2.10
v1.2.9
v1.2.8
v1.2.7
v1.2.6
v1.2.5
v1.2.4
v1.2.3
v1.2.2
v1.2.1
v1.2.0
v1.1.10
v1.1.9
Code Analysis
Analyzed Mar 16, 2026

CV Builder – Professional Resume Builder SaaS Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
1970
2581 escaped
Nonce Checks
9
Capability Checks
54
File Operations
6
External Requests
12
Bundled Libraries
1

Bundled Libraries

DataTables

SQL Query Safety

100% prepared2 total queries

Output Escaping

57% escaped4551 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

5 flows
<registration> (includes\dashboard\registration.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
10 unprotected

CV Builder – Professional Resume Builder SaaS Attack Surface

Entry Points22
Unprotected10

AJAX Handlers 17

authwp_ajax_bwd_handle_pdf_downloadbwdcv-boots.php:743
noprivwp_ajax_bwd_handle_pdf_downloadbwdcv-boots.php:744
authwp_ajax_bwdcv_upload_template_screenshotincludes\blocks-loader.php:37
authwp_ajax_bwdcv_get_template_contentincludes\blocks-loader.php:41
authwp_ajax_bwdcv_scgp_openai_api_requestincludes\blocks-loader.php:47
authwp_ajax_bwdcv_save_signatureincludes\registration-form.php:37
authwp_ajax_wc_lost_password_ajaxincludes\registration-form.php:44
noprivwp_ajax_wc_lost_password_ajaxincludes\registration-form.php:45
authwp_ajax_bwdcv_openai_api_requestincludes\subscription-plans.php:30
authwp_ajax_bwdcv_add_to_cart_and_checkoutincludes\subscription-plans.php:36
noprivwp_ajax_bwdcv_add_to_cart_and_checkoutincludes\subscription-plans.php:37
authwp_ajax_bwdcv_load_checkoutincludes\subscription-plans.php:38
noprivwp_ajax_bwdcv_load_checkoutincludes\subscription-plans.php:39
authwp_ajax_bwdcv_process_checkoutincludes\subscription-plans.php:40
noprivwp_ajax_bwdcv_process_checkoutincludes\subscription-plans.php:41
authwp_ajax_bwdcv_delete_old_folderincludes\updater\updates\old_folder_checker.php:31
authwp_ajax_bwdcv_dismiss_old_folder_noticeincludes\updater\updates\old_folder_checker.php:387

Shortcodes 5

[custom_login] includes\registration-form.php:30
[custom_registration] includes\registration-form.php:31
[instantly_cv_create] includes\registration-form.php:32
[subscription_product] includes\subscription-plans.php:26
[cv_dashboard_setting] includes\subscription-plans.php:27
WordPress Hooks 107
actionpre_get_postsbwdcv-boots.php:738
actionwp_enqueue_scriptsbwdcv-boots.php:746
actionadmin_enqueue_scriptsbwdcv-boots.php:747
actionadmin_initbwdcv-boots.php:748
actionupdate_option_bwd_userfronted_optionsbwdcv-boots.php:749
actionupdate_option_bwd_userfronted_optionsbwdcv-boots.php:750
actionupdate_option_bwd_userfronted_optionsbwdcv-boots.php:751
actionlogin_enqueue_scriptsbwdcv-boots.php:752
actionadmin_menuincludes\admin-menu.php:11
actionadmin_initincludes\admin-menu.php:12
actionwoocommerce_new_orderincludes\admin-menu.php:13
filterpost_row_actionsincludes\admin-menu.php:14
actionmanage_cv_posts_custom_columnincludes\admin-menu.php:15
filtermanage_cv_posts_columnsincludes\admin-menu.php:16
actionadmin_headincludes\admin-menu.php:17
actionenqueue_block_editor_assetsincludes\admin-menu.php:18
actioninitincludes\blocks-loader.php:19
filterblock_categories_allincludes\blocks-loader.php:23
filterblock_categoriesincludes\blocks-loader.php:25
filterrender_blockincludes\blocks-loader.php:29
actionenqueue_block_editor_assetsincludes\blocks-loader.php:32
actionenqueue_block_assetsincludes\blocks-loader.php:35
filterpost_row_actionsincludes\blocks-loader.php:39
actionadmin_footerincludes\blocks-loader.php:40
actionadmin_enqueue_scriptsincludes\blocks-loader.php:42
actionwp_enqueue_scriptsincludes\blocks-loader.php:44
actioninitincludes\registration-form.php:33
actionwoocommerce_created_customerincludes\registration-form.php:34
actioninitincludes\registration-form.php:35
actionwp_enqueue_scriptsincludes\registration-form.php:39
actionwoocommerce_lostpassword_formincludes\registration-form.php:41
actionwoocommerce_lostpassword_processincludes\registration-form.php:42
actiontemplate_redirectincludes\registration-form.php:46
actioninitincludes\registration-form.php:47
actionwpincludes\requires-check.php:111
actioncheck_subscription_expiry_notificationsincludes\requires-check.php:189
actionwpincludes\requires-check.php:217
actionwpincludes\requires-check.php:245
actionwpincludes\requires-check.php:258
actionwp_headincludes\subscription-plans.php:9
actionproduct_type_optionsincludes\subscription-plans.php:10
filterwoocommerce_product_options_general_product_dataincludes\subscription-plans.php:11
actionwoocommerce_process_product_metaincludes\subscription-plans.php:12
actionwoocommerce_product_data_panelsincludes\subscription-plans.php:13
actionsave_postincludes\subscription-plans.php:14
actionwoocommerce_after_shop_loop_item_titleincludes\subscription-plans.php:15
actionwoocommerce_after_shop_loop_itemincludes\subscription-plans.php:16
actionwoocommerce_checkout_create_order_line_itemincludes\subscription-plans.php:17
filterwoocommerce_add_cart_item_dataincludes\subscription-plans.php:18
filterpost_classincludes\subscription-plans.php:19
actionwoocommerce_product_queryincludes\subscription-plans.php:21
actiontemplate_redirectincludes\subscription-plans.php:22
actionsave_postincludes\subscription-plans.php:23
actionwoocommerce_add_to_cartincludes\subscription-plans.php:24
filterwoocommerce_is_sold_individuallyincludes\subscription-plans.php:25
actionwp_enqueue_scriptsincludes\subscription-plans.php:28
actionwp_footerincludes\subscription-plans.php:33
actionwp_enqueue_scriptsincludes\subscription-plans.php:34
actiontemplate_redirectincludes\subscription-plans.php:35
filterwoocommerce_default_address_fieldsincludes\subscription-plans.php:42
filterwoocommerce_checkout_fieldsincludes\subscription-plans.php:46
actionadmin_initincludes\subscription-plans.php:48
actionadmin_menuincludes\subscription-plans.php:49
actionadmin_initincludes\subscription-plans.php:50
actionadmin_bar_menuincludes\subscription-plans.php:51
actionadmin_post_bwdcv_past_user_create_edit_pageincludes\subscription-plans.php:52
filterthe_titleincludes\subscription-plans.php:53
actioninitincludes\subscription-plans.php:54
actionwp_loginincludes\subscription-plans.php:55
filtersingle_templateincludes\subscription-plans.php:56
actionadmin_footerincludes\subscription-plans.php:57
actionadmin_menuincludes\subscription-plans.php:64
actionadmin_enqueue_scriptsincludes\subscription-plans.php:65
actioninitincludes\subscription-plans.php:68
filterwoocommerce_data_storesincludes\subscription-plans.php:171
actionadmin_noticesincludes\subscription-plans.php:605
actionadmin_noticesincludes\subscription-plans.php:615
actionadmin_noticesincludes\subscription-plans.php:619
filterthe_authorincludes\subscription-plans.php:647
filterget_the_author_display_nameincludes\subscription-plans.php:648
filterthe_dateincludes\subscription-plans.php:649
filterthe_timeincludes\subscription-plans.php:650
filterget_the_dateincludes\subscription-plans.php:651
filterget_the_timeincludes\subscription-plans.php:652
actionupgrader_process_completeincludes\updater\updater.php:26
actionadmin_initincludes\updater\updater.php:27
actionplugins_loadedincludes\updater\updater.php:205
actionadmin_noticesincludes\updater\updater.php:208
actionadmin_noticesincludes\updater\updates\delete_old_folder.php:65
actionadmin_noticesincludes\updater\updates\old_folder_checker.php:30
actionadmin_footerincludes\updater\updates\old_folder_checker.php:32
actionadmin_initwp-cv-builder.php:34
actioninitwp-cv-builder.php:83
actionwoocommerce_flush_rewrite_ruleswp-cv-builder.php:85
actionenqueue_block_editor_assetswp-cv-builder.php:90
filterplugin_action_linkswp-cv-builder.php:91
actioninitwp-cv-builder.php:99
actioninitwp-cv-builder.php:100
actioninitwp-cv-builder.php:101
actionin_admin_headerwp-cv-builder.php:102
actioninitwp-cv-builder.php:104
actionadmin_noticeswp-cv-builder.php:106
actionadmin_noticeswp-cv-builder.php:111
actionadmin_noticeswp-cv-builder.php:113
actionadmin_noticeswp-cv-builder.php:115
filtershow_admin_barwp-cv-builder.php:430
actionadmin_noticeswp-cv-builder.php:436

Scheduled Events 1

check_subscription_expiry_notifications
Maintenance & Trust

CV Builder – Professional Resume Builder SaaS Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedApr 15, 2026
PHP min version7.0
Downloads6K

Community Trust

Rating100/100
Number of ratings4
Active installs40
Developer Profile

CV Builder – Professional Resume Builder SaaS Developer Profile

Best WP Developer

11 plugins · 620 total installs

94
trust score
Avg Security Score
91/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect CV Builder – Professional Resume Builder SaaS

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/cv-builder/assets/css/cv-builder-frontend.css/wp-content/plugins/cv-builder/assets/css/cv-builder-style.css/wp-content/plugins/cv-builder/assets/js/cv-builder-frontend.js/wp-content/plugins/cv-builder/assets/js/cv-builder-script.js
Script Paths
/wp-content/plugins/cv-builder/assets/js/cv-builder-frontend.js/wp-content/plugins/cv-builder/assets/js/cv-builder-script.js
Version Parameters
cv-builder/assets/css/cv-builder-frontend.css?ver=cv-builder/assets/css/cv-builder-style.css?ver=cv-builder/assets/js/cv-builder-frontend.js?ver=cv-builder/assets/js/cv-builder-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
cv-builder-contentcv-builder-form-wrappercv_builder_sectioncv_builder_item
HTML Comments
<!-- cv-builder shortcode start --><!-- cv-builder shortcode end -->
Data Attributes
data-cv-builder-iddata-cv-builder-form-id
JS Globals
cvBuilderFrontendCVBuilderAjax
REST Endpoints
/wp-json/cv-builder/v1/submit/wp-json/cv-builder/v1/get_data
Shortcode Output
<div class="cv-builder-content"><form class="cv-builder-form-wrapper">
FAQ

Frequently Asked Questions about CV Builder – Professional Resume Builder SaaS