CVE-2026-109447 | Cozmos Labs User Profile Builder Plugin up to 4.0.3 on WordPress Activation wppb_add_meta_to_user_on_activation role privileges management

SecurityVulns
Yanac

A vulnerability, which was classified as critical, has been found in Cozmos Labs User Profile Builder Plugin up to 4.0.3 on WordPress. This affects the function wppb_add_meta_to_user_on_activation of the component Activation Handler. The manipulation of the argument role leads to improper privilege management.

This vulnerability is documented as CVE-2026-109447. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More