Unknown User Profile Builder vulnerabilities

5 CVEs affecting Unknown User Profile Builder, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76548, published 2026-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-15030, published 2026-02-02. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their…
CVE-2026-76546, published 2026-08-29. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowing users with a role as low as contributor to perform Stored Cross-Site…
CVE-2026-76547, published 2026-08-29. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a configuration file, allowing high privilege users such as administrators…
CVE-2026-15368, published 2026-08-01. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauthenticated attackers…
CVE-2026-76548, published 2026-08-29. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reserved to privileged roles. This…