Vulnerability · Published Aug 29, 2026 · Assigned by WPScan
CVE-2026-76548Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass
High 8.2
In plain English
A high-severity improper authentication in User Profile Builder from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.3%top 74.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reserved to privileged roles. This allows them to list the site's media library and to modify unpublished posts, pages and media items belonging to other users.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | User Profile Builder | 3.8.1 – before 4.0.1 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
References
- https://wpscan.com/vulnerability/75e0611d-e11d-44f8-8fc1-7c40bb113f64/ exploit, vdb-entry, technical-description