User Profile Builder vulnerabilities
We track 7 vulnerabilities in User Profile Builder products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.
Latest User Profile Builder vulnerabilities
- 7.2 High severity
User Profile Builder: Improper Privilege Management
The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific account selected on its front-end Edit Profile form, allowing an Administrator of a Multisite subsite to change any other user's account email
- 7.1 High severity
User Profile Builder: Improper Neutralization of Input During Web Page Generation
The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a JavaScript context on one of its admin pages, leading to Reflected Cross-Site Scripting against high-privilege users.
- 8.2 High severity
User Profile Builder: Improper Authentication
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reserved to privileged roles. This allows them to list the site's media library and to modify un
- 8.1 High severity
User Profile Builder: Improper Privilege Management
The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauthenticated attackers to obtain an authenticated session for an arbitrary existing
- 9.8 Critical severity
User Profile Builder: Improper Privilege Management
The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to
- 9.8 Critical severity
User Profile Builder: Incorrect Authorization
it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user registration process.
- 9.1 Critical severity
User Profile Builder: Unrestricted Upload of File with Dangerous Type
The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP.