WordPress Plugin Vulnerabilities

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 3.16.6 - Missing Authorization

Description

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 3.16.5. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Affects Plugins

Plugin icon
profile-builder
Fixed in 3.16.6

References

CVE
CVE-2026-66701
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/16a4665a-df79-4def-8215-df44dffdd332

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Ananda Dhakal
Verified
No
WPVDB ID
ba038694-791a-40e2-a776-f84dc491bfce

Timeline

Publicly Published
2026-07-29 (about 2 months ago)
Added
2026-08-04 (about 2 months ago)
Last Updated
2026-08-04 (about 2 months ago)

Other

Published
Title
Published
2023-02-01
Title
We’re Open! < 1.45 - Missing Authorization
Published
2026-03-20
Title
Punnel <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update via 'punnel_save_config' AJAX Action
Published
2023-12-27
Title
Eazy Plugin Manager < 4.1.3 - Missing Authorization via update_options
Published
2026-10-16
Title
WP Booking System < 2.1.0.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX action
Published
2026-09-08
Title
WP Recipe Maker < 10.8.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode