CVE-2026-54853
CVE-2026-54853 · WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Profile Builder: from n/a through 4.0.5.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
profile builder
- Versions
- ≥ 0, ≤ 4.0.5: Affected; ≥ 4.0.6: Not affected (custom)
Update to 4.0.6