CVE-2026-3139

Name of the Vulnerable Software and Affected Versions User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor versions prior to 3.15.6

Description The User Profile Builder plugin for WordPress is susceptible to an Insecure Direct Object Reference. This issue stems from a lack of validation on a user-controlled key within the wppb save avatar value() function. Authenticated attackers with subscriber-level access or higher can exploit this to modify the 'post author' field, potentially reassigning ownership of posts and attachments. The vulnerable parameter is post author.

Recommendations Update User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor to version 3.15.6 or later.