Vulnerability in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor — CVE-2026-111982
LowSeverity
0.3%Estimated exploit probability
40,000+ sitesInstalls
4.0.5Fixed in
What to do now
Update User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor to 4.0.5 or later.
Affected versions
- Everything before 4.0.5
Affected: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (plugin, profile-builder)
What the vulnerability is
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized access in all versions up to 4.0.5. This is due to a missing capability check on a function. This makes it possible for authenticated attackers, with administrator-level access and above, to perform an unauthorized action.