CVE-2026-115807

Name of the Vulnerable Software and Affected Versions User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor versions prior to 4.0.4

Description Authenticated attackers with Author-level access and above can achieve limited privilege escalation. The issue occurs because the Gutenberg Register block passes the attacker-controlled Assigned Role attribute directly into the [wppb-register] shortcode without server-side authorization. While the form builder includes a role guard, it only downgrades roles possessing the manage options or remove users capabilities. Consequently, the Editor role and other privileged non-Administrator roles remain unrestricted, allowing attackers to create new accounts with these elevated roles.

Recommendations Update to a version newer than 4.0.3.