#user-profile-builder

0 stories this week · 0 this month · 2 in 6 months · mostly security

Stories per day · 30 days

2 stories, newest first · one card per story

The Hacker NewsAug 17, 2026high

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

Wordfence disclosed CVE-2026-15748, a critical unauthenticated file upload flaw enabling RCE in the Forminator Forms WordPress plugin, patched in version 1.56.2.

3 min readarbitrary-file-upload authentication-bypass

Infosecurity MagazineAug 17, 2026high

WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover

A critical unauthenticated flaw in the User Profile Builder WordPress plugin exposed roughly 40,000 sites to administrator account takeover.

admin-takeover plugin-vulnerability

Stories tagged #user-profile-builder

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover