peprodev PeproDev Ultimate Profile Solutions

• CVE-2026-4791 Medium 6.4 PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute 0.2%
• CVE-2025-3921 High 8.2 PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Function 0.4%
• CVE-2025-3924 Medium 5.3 PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumeration 0.4%
• CVE-2025-3844 Critical 9.8 PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover 0.6%