CVE-2026-92536 | ProfilePress Plugin up to 4.17.4 on WordPress Shortcode get_user_profile_structure reg_nickname/reg_bio information disclosure

October 3, 2026 Yanac

A vulnerability classified as problematic was found in ProfilePress Plugin up to 4.17.4 on WordPress. The impacted element is the function get_user_profile_structure of the component Shortcode Handler. Executing a manipulation of the argument reg_nickname/reg_bio can lead to information disclosure.

This vulnerability is handled as CVE-2026-92536. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More