https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 11:07:33 +0000 https://db.gcve.eu/vuln/cve-2026-15826 <p><strong>Affected:</strong> cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles &amp; User Role Editor</p> <p>The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_user() function calling absint() on the return value of wp_insert_user() before performing an is_wp_error() check — when a registration is submitted with a 61–70 character username, WordPress core rejects it with a WP_Error object, but absint() coerces that object to the integer 1 before the error check can short-circuit execution, causing the plugin to bind and return a transient-backed autologin nonce tied to user ID 1. This makes it possible for unauthenticated attackers to log in as the site&#39;s Administrator account (user ID 1), resulting in full administrative takeover of the site.</p> <p><strong>Affected:</strong> cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles &amp; User Role Editor</p> <p>The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_user() function calling absint() on the return value of wp_insert_user() before performing an is_wp_error() check — when a registration is submitted with a 61–70 character username, WordPress core rejects it with a WP_Error object, but absint() coerces that object to the integer 1 before the error check can short-circuit execution, causing the plugin to bind and return a transient-backed autologin nonce tied to user ID 1. This makes it possible for unauthenticated attackers to log in as the site&#39;s Administrator account (user ID 1), resulting in full administrative takeover of the site.</p> https://db.gcve.eu/vuln/cve-2026-15826