p PatchFirst

CVE-2026-112242

CVE-2026-112242 · WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile Builder: from n/a through 4.0.4.

CVSS 8.8 · High · EPSS 0.2% · Fix available

Published
Updated

Affected products and versions

  • profile builder

    Versions
    • ≥ 0, ≤ 4.0.4: Affected; ≥ 4.0.5: Not affected (custom)

    Update to 4.0.5

Original sources

Check your server →