wp-user-profiles vulnerabilities

CVEs whose affected-version data names the wp-user-profiles package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-105058High· 8.8

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

▾ TwilightJohn James Jacoby · wp-user-profilesvia NVD

wp-user-profiles vulnerabilities (CVEs) · VulnSea