4.3
Medium
CVE-2026-3139 The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is…
Description
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppb_save_avatar_value() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to reassign ownership of arbitrary posts and attachments by changing 'post_author'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 3.15 | earliest → 3.15.5 | No fix stated |
Other CVEs of User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
The 21 CVEs of User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor →
CVE-2026-115807
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is…
7.1
High
CVE-2026-100186
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is…
7.2
High
CVE-2026-109447
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is…
8.1
High
CVE-2026-107748
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is…
6.4
Medium