Live › vulnerability › CVE-2026-54854
Profile Builder, a WordPress plugin, has a flaw that lets a Contributor-level account escalate its privileges. The sources do not say what the attacker gains beyond that role change.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Sites running the Profile Builder WordPress plugin at version 4.0.5 or earlier, where Contributor-role users exist. The sources do not describe further conditions.
No product ranges from the sources yet.
4.0.5 and below.4.0.5; the sources do not name the exact fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.
This page as .md · .json · in your agent: get_signal("CVE-2026-54854")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.