User Profile Builder

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 17, 2026
Last mentionedAug 17, 2026

Timeline

2 articles · newest first

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

Wordfence disclosed CVE-2026-15748, a critical unauthenticated file upload flaw enabling RCE in the Forminator Forms WordPress plugin, patched in version 1.56.2.

The Hacker NewsAug 17, 18:22 UTC · Aug 17, 2026VulnerabilityCVE-2026-15748 CVE-2026-158261 · 1 read

WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover

A critical unauthenticated flaw in the User Profile Builder WordPress plugin exposed roughly 40,000 sites to administrator account takeover.

Infosecurity MagazineAug 17, 13:30 UTC · Aug 17, 2026Vulnerability2

Related CVEs

by mentions

CVE-2026-157484%9.8
Unauthenticated RCE via Arbitrary File Upload in Forminator Forms WordPress Plugin
published Aug 18, 2026WPMU DEV Forminator Forms (WordPress plugin)PoC
CVE-2026-158264%9.8
Unauthenticated Admin Login Bypass in WordPress User Profile Builder Plugin (≤3.16.4)
published Aug 15, 2026Cozmoslabs User Profile Builder (Profile Builder) plugin for WordPress

Appears with

Wordfencevendor · 1
WordPressvendor · 1
WPMU DEVvendor · 1
Forminator Formsproduct · 1
WordPressproduct · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Aug 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.