Now officially on WordPress.org

CVE Database / CVE-2026-66701

CVE · Medium

CVE-2026-66701 — User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.16.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-66701 User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor [profile-builder] < 3.16.6 Missing Authorization Medium 5.3 < 3.16.6 3.16.6 2026-03-30 —

CVE-2026-66701

The User Profile Builder plugin for WordPress has a security flaw that allows anyone to bypass normal access controls. A critical oversight in the plugin's code means that certain actions can be performed without proper authorization, putting sensitive data at risk. Versions 3.16.5 and earlier are affected by this vulnerability.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings