CyberRota Analysis
AI-GeneratedVersions of WP User Profiles up to 2.7.3 are vulnerable to a privilege escalation flaw that allows subscribers to gain elevated permissions. This could lead to unauthorized access and manipulation of user data or settings within the application. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.
CVE
CVE-2026-105058
Severity
HIGH
CVSS
8.8
EPSS
0.32%
Original NVD Description
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.