7.2
High
CVE-2026-111982 The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific…
Description
The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific account selected on its front-end Edit Profile form, allowing an Administrator of a Multisite subsite to change any other user's account email, including a Network Super Admin's, and take over that account through the password-reset flow.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| User Profile Builder 4.0 | earliest → < 4.0.5 | 4.0.5 |
Other CVEs of User Profile Builder
The 11 CVEs of User Profile Builder →
CVE-2026-111966
The User Profile Builder WordPress plugin before 4.0.5 does not sanitise and escape one of its shortcode attributes…
6.8
Medium
CVE-2026-111948
The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a…
7.1
High
CVE-2026-76547
The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when…
6.6
Medium
CVE-2026-76548
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature,…
8.2
High