Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 6 min 165 bronnen 1 kritiek 17 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-111982

HIGH · 7.2 CVSS Gepubliceerd: CWE-269

Beschrijving

The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific account selected on its front-end Edit Profile form, allowing an Administrator of a Multisite subsite to change any other user's account email, including a Network Super Admin's, and take over that account through the password-reset flow.

References