Unknown User Profile Builder

3 known vulnerabilities in Unknown User Profile Builder, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-76548 CVSS 8.2 high The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting…
  • CVE-2026-76547 CVSS 6.6 medium The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a…
  • CVE-2026-76546 CVSS 6.8 medium The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowing users with a…