Vulnerability in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor — CVE-2026-76548
MediumSeverity
0.2%Estimated exploit probability
40,000+ sitesInstalls
4.0.1Fixed in
What to do now
Update User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor to 4.0.1 or later.
Affected versions
- Everything before 4.0.1
Affected: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (plugin, profile-builder)
What the vulnerability is
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized access in all versions up to 4.0.1. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.