#UserProfileBuilder
LightNews LightNews
hacks.gr
A simple file upload could give an attacker a path to take over a WordPress site.

Forminator Forms,…

https://en.hacks.gr/krisimes-adynamies-se-dyo-prostheta-toy-wordpress-epireazontai-pano-apo-640-000-istoselides/

#Cybersecurity #WordPress #ForminatorForms #UserProfileBuilder #ArbitraryFileUpload
Κρίσιμες αδυναμίες σε δύο πρόσθετα του WordPress: Επηρεάζονται πάνω από 640.000 ιστοσελίδες
August 18, 2026 at 4:53 AM
securityonline.bsky.social
CVE-2026-15826 (CVSS 9.8) is a User Profile Builder vulnerability letting attackers log in as WordPress admin. Over 40,000 sites affected; update to 3.16.5

#CVE202615826 #WordPress #UserProfileBuilder #InfoSec
CVE-2026-15826: User Profile Builder Bug Under Active Attack, Grants Full Admin Takeover (CVSS 9.8)
TL;DR: A critical User Profile Builder vulnerability, carrying a maximum CVSS score of 9.8 and tracked as CVE-2026-15826, now threatens more than 40,000 WordPress sites. It lets unauthenticated attackers log straight in as a site's administrator. Wordfence's firewall has already blocked 13 real attacks against the bug in the past 24 hours. Why It Matters User Profile Builder powers custom registration, login, and profile forms on more than 40,000…
securityonline.info
August 15, 2026 at 4:04 AM
donwebmedia.bsky.social
40,000 sitios WordPress vulnerables: User Profile Builder

¿Tu sitio usa User Profile Builder? 40,000 sitios WordPress afectados por bypass de autenticación. Actualizá a la versión 3.16.4 ahora.

#userprofilebuilder #bypassautenticacion #cve202615368 #wordpressplugins #escaladaprivilegios
40,000 sitios WordPress vulnerables: User Profile Builder - Seguridad en Wordpress
CVE-2025-15030 y CVE-2026-15368 permiten acceso de administrador sin credenciales en más de 40,000 sitios WordPress. El parche es la versión 3.16.4.
seguridadenwordpress.com
August 15, 2026 at 12:59 AM