CVE-2026-105058

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

Credits

Nguyen Viet Tin | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/wp-user-profiles/vulnerability/wordpress-wp-user-profiles-plugin-2-7-3-privilege-escalation-vulnerability?_s_id=cve