{"id":"CVE-2026-125776","kind":"vulnerability","aliases":["CVE-2026-125776"],"related":[],"title":"Profile Builder WordPress plugin: missing authorization check on access control","description":"Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Profile Builder: from n/a through 4.0.6.","summary":"Profile Builder, a WordPress plugin by Cozmoslabs, has a missing authorization check that lets it be exploited through incorrectly configured access control levels. The sources say versions through 4.0.6 are affected.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","profile-builder","wordpress"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed Profile Builder version in the WordPress admin plugins list or in `wp plugin get profile-builder --field=version`\n- Compare the installed version against `4.0.6`","fix":null,"status":"open","published_at":"2026-11-11T13:17:23+00:00","first_seen_at":"2026-11-11T13:27:14+00:00","triaged_at":"2026-11-11T13:29:29+00:00","updated_at":"2026-11-11T13:29:29+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-11T13:29:29Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Profile Builder WordPress plugin: missing authorization check on access control","impact":"medium","summary":"Profile Builder, a WordPress plugin by Cozmoslabs, has a missing authorization check that lets it be exploited through incorrectly configured access control levels. The sources say versions through 4.0.6 are affected.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","profile-builder"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown access to content restricted by access control levels","analyst_note":"Find the fixed version and the exact access control configuration affected in the NVD entry or the Cozmoslabs advisory.","how_to_check":"- Check the installed Profile Builder version in the WordPress admin plugins list or in `wp plugin get profile-builder --field=version`\n- Compare the installed version against `4.0.6`","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Sites running Profile Builder through version 4.0.6 that use its access control levels to restrict content. The sources do not say which configurations are exposed, so sites that do not use these access control features may be less at risk. unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000695,"input_tokens":4544,"output_tokens":482,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-125776':13A,16A '-2026':12A,15A '4.0.6':50B,78C 'access':9A,42B,67C 'affect':52B,72C 'allow':63C 'author':6A,32B,54C 'builder':2A,20B,23B,59C,62C,74C 'check':7A,33B 'configur':41B,66C 'control':10A,43B,68C 'cozmoslab':28B,57C 'cve':11A,14A 'exploit':38B,64C 'incorrect':40B,65C 'issu':71C 'let':35B 'level':44B 'levels.this':70C 'miss':5A,31B,53C 'n/a':76C 'packag':17B 'plugin':4A,26B 'profil':1A,19B,22B,58C,61C,73C 'profile-build':18B,60C 'say':47B 'secur':69C 'sourc':46B 'version':48B 'vulner':55C 'wordpress':3A,21B,25B","nicknames":[],"mitigations":[],"who_affected":"Sites running Profile Builder through version 4.0.6 that use its access control levels to restrict content. The sources do not say which configurations are exposed, so sites that do not use these access control features may be less at risk. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","package","profilebuilder","wordpress"],"campaign_type":null,"search_a":"'-125776':13A,16A '-2026':12A,15A 'access':9A 'author':6A 'builder':2A 'check':7A 'control':10A 'cve':11A,14A 'miss':5A 'plugin':4A 'profil':1A 'wordpress':3A","search_b":"'4.0.6':50B 'access':42B 'affect':52B 'author':32B 'builder':20B,23B 'check':33B 'configur':41B 'control':43B 'cozmoslab':28B 'exploit':38B 'incorrect':40B 'let':35B 'level':44B 'miss':31B 'packag':17B 'plugin':26B 'profil':19B,22B 'profile-build':18B 'say':47B 'sourc':46B 'version':48B 'wordpress':21B,25B","search_c":"'4.0.6':78C 'access':67C 'affect':72C 'allow':63C 'author':54C 'builder':59C,62C,74C 'configur':66C 'control':68C 'cozmoslab':57C 'exploit':64C 'incorrect':65C 'issu':71C 'levels.this':70C 'miss':53C 'n/a':76C 'profil':58C,61C,73C 'profile-build':60C 'secur':69C 'vulner':55C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T13:17:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125776","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125776","severity":null,"published_at":"2026-11-11T13:17:23+00:00","modified_at":"2026-11-11T13:17:23+00:00","first_seen_at":"2026-11-11T13:27:14+00:00","fetched_at":"2026-11-11T13:27:14+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}