PT-2026-67071 · WordPress · User Profile Builder
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
User Profile Builder versions prior to 3.16.4
Description
An issue exists where the automatic login process following user registration is not correctly bound to the newly created account. This allows unauthenticated attackers to obtain an authenticated session for any existing user, including administrators, on sites utilizing a supported but non-default configuration.
Recommendations
Update User Profile Builder to version 3.16.4 or later.
Exploit
Fix
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
User Profile Builder