CVE-2026-105058: John James Jacoby Wp User Profiles

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

Affected products

• John James Jacoby Wp User Profiles: up to and including 2.7.3

Published 2026-10-06. Last modified 2026-10-06.