Tag: cve 2026 15826

WordPress Plugin Flaw Enables Admin Takeover on 40,000 Sites

A critical vulnerability in the popular User Profile Builder plugin has put over 40,000 WordPress sites at risk of admin takeover, with a CVSS rating of 9.8; site owners should immediately update to version 3.16.5 or later to patch the flaw.