CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115807
HIGHCVSS 7.1NVD feed
Published 24 October 2026 · tracked since 24 October 2026
Description
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the Gutenberg Register block passing the attacker-controlled Assigned Role att
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-115972 MEDIUM 5.3
- CVE-2026-114704 HIGH 7.2
- CVE-2026-116016 HIGH 7.1
- CVE-2026-116010 MEDIUM 4.3
- CVE-2026-110018 HIGH 8.8
- CVE-2026-94075 CRITICAL 9.8
- CVE-2026-114693 MEDIUM 6.5
- CVE-2026-114196 CRITICAL 9.8
- CVE-2026-115802 MEDIUM 4.3
- CVE-2026-108013 MEDIUM 6.8