Stored Cross-Site Scripting Vulnerability in User Profile Builder Plugin for WordPress
CVE-2026-107748

6.4MEDIUM

Key Information:

Vendor

WordPress
Status
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Vendor
CVE Published:
16 October 2026

What is CVE-2026-107748?

The User Profile Builder plugin for WordPress is affected by a Stored Cross-Site Scripting vulnerability through the 'display_name' parameter. This flaw arises from inadequate input sanitization and output escaping, allowing authenticated users with subscriber-level access and higher to inject arbitrary scripts. These scripts persist independently in the comments database table, meaning changes to the attacker's display name post-injection do not eliminate the risk, as the malicious scripts will execute whenever a user accesses the compromised page. All versions up to and including 4.0.3 are impacted.

Affected Version(s)

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 0 <= 4.0.3

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/profile-builde...
https://plugins.trac.wordpress.org/browser/profile-builde...

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

UKO
.