Privilege Escalation in User Profile Builder Plugin for WordPress

CVE-2026-109447

What is CVE-2026-109447?

The User Profile Builder plugin for WordPress is susceptible to a privilege escalation vulnerability that allows unauthenticated attackers to gain administrative access. This issue arises from the role parameter manipulated within the wppb_add_meta_to_user_on_activation() function, which lacks proper validation. An attacker can exploit this by submitting a malicious role value through the public registration form and, if certain conditions are met—such as existing legacy form fields—the attacker can activate an account with administrator privileges. This vulnerability emphasizes the importance of secure user registration processes and proper role management in WordPress plugins.

References