CVE-2026-115807: CWE-269 Improper Privilege Management in cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-115807 describes an improper privilege management vulnerability (CWE-269) in the User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor WordPress plugin. Versions up to and including 4.0.3 are affected. The issue stems from the Gutenberg Register block passing an attacker-controlled Assigned Role attribute directly into the [wppb-register] shortcode without proper server-side authorization checks. The plugin's role guard only restricts roles with manage_options or remove_users capabilities, leaving roles like Editor unrestricted. Consequently, authenticated users with Author-level privileges or higher can create new accounts with elevated roles such as Editor, bypassing intended restrictions.

An authenticated attacker with Author-level or higher privileges can escalate their privileges by creating new WordPress accounts assigned to privileged roles such as Editor. This can lead to unauthorized content management and potential further compromise of the WordPress site. The vulnerability does not allow privilege escalation to Administrator or roles with manage_options or remove_users capabilities, but still grants significant unauthorized access.

No official patch or fix has been explicitly stated in the provided data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict or monitor users with Author-level access or higher to mitigate risk. Avoid using the vulnerable versions of the plugin if possible.