CVE-2026-15826

🗓️ 14 Aug 2026 18:30:20Reported by candidateType

cve👁 33 Views

CVE-2026-15826 (WordPress plugin: User Profile Builder) is an authentication bypass in versions ≤ 3.16.4 due to type confusion in the autologin flow after failed user creation. An unauthenticated attacker can register with a 61–70 character userna...

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-15826	15 Aug 202606:38	–	attackerkb
Circl	CVE-2026-15826	15 Aug 202604:04	–	circl
Cvelist	CVE-2026-15826 User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter	15 Aug 202606:38	–	cvelist
EUVD	EUVD-2026-59593	15 Aug 202606:38	–	euvd
NVD	CVE-2026-15826	15 Aug 202607:16	–	nvd
Positive Technologies	PT-2026-72877	15 Aug 202600:00	–	ptsecurity
Wordfence Blog	40,000 WordPress Sites affected by Authentication Bypass Vulnerability in User Profile Builder WordPress Plugin	14 Aug 202618:30	–	wordfence

Source	Link
bsky	www.bsky.app/profile/cve.skyfleet.blue/post/dfhmoikfql5b4
bsky	www.bsky.app/profile/offseq.bsky.social/post/3mt45okhdan2t
bsky	www.bsky.app/profile/postac001.bsky.social/post/3mt4elfl6d62w
bsky	www.bsky.app/profile/securityonline.bsky.social/post/3mt3s65m3s72u
bsky	www.bsky.app/profile/stackflag.bsky.social/post/3mt4ewfqjs72e
bsky	www.bsky.app/profile/thehackerwire.bsky.social/post/3mt4jfrceyo27
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
infosec	www.infosec.exchange/users/offseq/statuses/117098350030600158
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-15826
plugins	www.plugins.trac.wordpress.org/browser/profile-builder/tags/3.16.4/features/functions.php

14 Aug 2026 18:30Current