OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-105058

HIGH · CVSS 8.8 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

Versions of WP User Profiles up to 2.7.3 are vulnerable to a privilege escalation flaw that allows subscribers to gain elevated permissions. This could lead to unauthorized access and manipulation of user data or settings within the application. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.

CVE
CVE-2026-105058
Severity
HIGH
CVSS
8.8
EPSS
0.32%

Original NVD Description

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.