CVE-2026-104003 | ProfilePress Plugin up to 4.17.5 on WordPress Shortcode get_user_profile_structure code injection

October 16, 2026 Yanac

A vulnerability was found in ProfilePress Plugin up to 4.17.5 on WordPress. It has been classified as critical. Affected by this vulnerability is the function get_user_profile_structure of the component Shortcode Handler. The manipulation leads to code injection.

This vulnerability is listed as CVE-2026-104003. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More