CVE-2026-100186 | cozmoslabs User Profile Builder Plugin up to 4.0.3 on WordPress First Name Field first_name cross site scripting

October 16, 2026 Yanac

A vulnerability labeled as problematic has been found in cozmoslabs User Profile Builder Plugin up to 4.0.3 on WordPress. The affected element is an unknown function of the component First Name Field. Such manipulation of the argument first_name leads to cross site scripting.

This vulnerability is referenced as CVE-2026-100186. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More