{"id":"CVE-2026-125777","kind":"vulnerability","aliases":["CVE-2026-125777"],"related":[],"title":"Profile Builder WordPress plugin leaks embedded sensitive data in responses","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Cozmoslabs Profile Builder profile-builder allows Retrieve Embedded Sensitive Data.This issue affects Profile Builder: from n/a through 4.0.6.","summary":"Profile Builder, a WordPress plugin from Cozmoslabs, sends sensitive information inside its output that should not be sent. An attacker can retrieve that embedded sensitive data.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"profile-builder","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["package","profile-builder","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- Check the installed Profile Builder plugin version in the WordPress admin under Plugins, or with `wp plugin get profile-builder --field=version`","fix":"- Profile Builder: move to a version newer than `4.0.6`; the sources do not name the exact fixed version","status":"open","published_at":"2026-11-11T12:19:50+00:00","first_seen_at":"2026-11-11T12:27:12+00:00","triaged_at":"2026-11-11T12:28:45+00:00","updated_at":"2026-11-11T12:28:45+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-11T12:28:45Z","model":"claude-haiku-5-5","output":{"fix":"- Profile Builder: move to a version newer than `4.0.6`; the sources do not name the exact fixed version","reach":"internet","title":"Profile Builder WordPress plugin leaks embedded sensitive data in responses","impact":"medium","summary":"Profile Builder, a WordPress plugin from Cozmoslabs, sends sensitive information inside its output that should not be sent. An attacker can retrieve that embedded sensitive data.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","profile-builder"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"sensitive embedded data retrieved by an outside party","analyst_note":"Confirm the fixed version and the specific data exposed from the NVD entry or the vendor's changelog at https://nvd.nist.gov/vuln/detail/CVE-2026-125777.","how_to_check":"- Check the installed Profile Builder plugin version in the WordPress admin under Plugins, or with `wp plugin get profile-builder --field=version`\n- unknown for other checks; the sources do not say which data or endpoint is involved","plain_action":"","product_name":"profile-builder","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites running the Profile Builder WordPress plugin at version 4.0.6 or earlier are affected according to the advisory's affected range. The sources do not describe the specific data path or configuration that exposes the information, so unknown whether a default install is exposed. Sites not running this plugin can skip it.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000759,"input_tokens":4550,"output_tokens":608,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-125777':13A,16A '-2026':12A,15A '4.0.6':78C 'affect':72C 'allow':66C 'attack':44B 'builder':2A,19A,23B,26B,62C,65C,74C 'cozmoslab':31B,60C 'cve':11A,14A 'data':8A,50B,57C 'data.this':70C 'embed':6A,48B,68C 'inform':34B,54C 'insert':51C 'insid':35B 'issu':71C 'leak':5A 'n/a':76C 'output':37B 'packag':20B 'plugin':4A,29B 'profil':1A,22B,25B,61C,64C,73C 'profile':18A 'profile-build':21B,63C 'profile-builder':17A 'respons':10A 'retriev':46B,67C 'send':32B 'sensit':7A,33B,49B,53C,69C 'sent':42B,56C 'vulner':58C 'wordpress':3A,24B,28B","nicknames":[],"mitigations":[],"who_affected":"Sites running the Profile Builder WordPress plugin at version 4.0.6 or earlier are affected according to the advisory's affected range. The sources do not describe the specific data path or configuration that exposes the information, so unknown whether a default install is exposed. Sites not running this plugin can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["profilebuilder"],"ptokens":["builder","profile"],"labels":["medium","package","profilebuilder","vendor","wordpress"],"campaign_type":null,"search_a":"'-125777':13A,16A '-2026':12A,15A 'builder':2A,19A 'cve':11A,14A 'data':8A 'embed':6A 'leak':5A 'plugin':4A 'profil':1A 'profile':18A 'profile-builder':17A 'respons':10A 'sensit':7A 'wordpress':3A","search_b":"'attack':44B 'builder':23B,26B 'cozmoslab':31B 'data':50B 'embed':48B 'inform':34B 'insid':35B 'output':37B 'packag':20B 'plugin':29B 'profil':22B,25B 'profile-build':21B 'retriev':46B 'send':32B 'sensit':33B,49B 'sent':42B 'wordpress':24B,28B","search_c":"'4.0.6':78C 'affect':72C 'allow':66C 'builder':62C,65C,74C 'cozmoslab':60C 'data':57C 'data.this':70C 'embed':68C 'inform':54C 'insert':51C 'issu':71C 'n/a':76C 'profil':61C,64C,73C 'profile-build':63C 'retriev':67C 'sensit':53C,69C 'sent':56C 'vulner':58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T12:19:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125777","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125777","severity":null,"published_at":"2026-11-11T12:19:50+00:00","modified_at":"2026-11-11T12:19:50+00:00","first_seen_at":"2026-11-11T12:27:12+00:00","fetched_at":"2026-11-11T12:27:12+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}