User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor vulnerabilities

Product

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

by cozmoslabs · last CVE Oct 24, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities19 In the news0 Timeline

Severity mix

Critical 1High 7Medium 11Low 0

Severity

All severities19 Critical1 High7 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-15826	9.8	4%	Aug 15	User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter Affected: through 3.16.4