CVE-2026-4791 | PeproDev Ultimate Profile Solutions Plugin up to 8.2.36 on WordPress Shortcode button cross site scripting

October 10, 2026 Yanac

A vulnerability has been found in PeproDev Ultimate Profile Solutions Plugin up to 8.2.36 on WordPress and classified as problematic. The impacted element is an unknown function of the component Shortcode Handler. Performing a manipulation of the argument button results in cross site scripting.

This vulnerability is identified as CVE-2026-4791. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More