CVE-2026-76548 | User Profile Builder Plugin up to 4.0.0 on WordPress File Upload improper authentication

August 29, 2026 Yanac

A vulnerability described as critical has been identified in User Profile Builder Plugin up to 4.0.0 on WordPress. The affected element is an unknown function of the component File Upload. The manipulation results in improper authentication.

This vulnerability is identified as CVE-2026-76548. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More