CVE-2026-76547 | User Profile Builder Plugin up to 4.0.0 on WordPress Configuration File Import deserialization

August 29, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in User Profile Builder Plugin up to 4.0.0 on WordPress. The affected element is an unknown function of the component Configuration File Import. This manipulation causes deserialization.

This vulnerability is registered as CVE-2026-76547. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More