CVE-2026-111966 | User Profile Builder Plugin up to 4.0.4 on WordPress Shortcode Attributes cross site scripting

October 23, 2026 Yanac

A vulnerability was found in User Profile Builder Plugin up to 4.0.4 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Shortcode Attributes. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-111966. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More