{"id":"CVE-2026-54854","kind":"vulnerability","aliases":["CVE-2026-54854"],"related":[],"title":"Profile Builder WordPress plugin: contributors can gain higher privileges","description":"Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.","summary":"Profile Builder, a WordPress plugin, has a flaw that lets a Contributor-level account escalate its privileges. The sources do not say what the attacker gains beyond that role change.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","profile-builder","wordpress"],"not_affected_if":["plugin-updated"],"how_to_check":"- Check the installed Profile Builder plugin version in the WordPress admin under Plugins; affected versions are `4.0.5` and below.\n- Review user accounts with the Contributor role for any that have been promoted unexpectedly.","fix":"- Move Profile Builder to a version later than `4.0.5`; the sources do not name the exact fixed version.","status":"open","published_at":"2026-10-30T19:18:26+00:00","first_seen_at":"2026-10-30T19:25:29+00:00","triaged_at":"2026-10-30T19:26:27+00:00","updated_at":"2026-10-30T19:26:27+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-30T19:26:27Z","model":"claude-haiku-5-5","output":{"fix":"- Move Profile Builder to a version later than `4.0.5`; the sources do not name the exact fixed version.","reach":"internet","title":"Profile Builder WordPress plugin: contributors can gain higher privileges","impact":"medium","summary":"Profile Builder, a WordPress plugin, has a flaw that lets a Contributor-level account escalate its privileges. The sources do not say what the attacker gains beyond that role change.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","profile-builder"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Contributor account gains higher privileges on the WordPress site","analyst_note":"Find the fixed Profile Builder version and the exact privilege gained at https://nvd.nist.gov/vuln/detail/CVE-2026-54854.","how_to_check":"- Check the installed Profile Builder plugin version in the WordPress admin under Plugins; affected versions are `4.0.5` and below.\n- Review user accounts with the Contributor role for any that have been promoted unexpectedly.","plain_action":"","needs_analyst":true,"not_affected_if":["plugin-updated"],"who_is_affected":"Sites running the Profile Builder WordPress plugin at version 4.0.5 or earlier, where Contributor-role users exist. The sources do not describe further conditions.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000668,"input_tokens":4049,"output_tokens":527,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-54854':12A,15A '4.0.5':58C 'account':35B 'attack':46B 'beyond':48B 'builder':2A,19B,22B,57C 'chang':51B 'contributor':5A,33B,52C 'contributor-level':32B 'cve':10A,13A 'escal':36B,54C 'flaw':28B 'gain':7A,47B 'higher':8A 'let':30B 'level':34B 'packag':16B 'plugin':4A,25B 'privileg':9A,38B,53C 'profil':1A,18B,21B,56C 'profile-build':17B 'role':50B 'say':43B 'sourc':40B 'version':59C 'wordpress':3A,20B,24B","nicknames":[],"mitigations":[],"who_affected":"Sites running the Profile Builder WordPress plugin at version 4.0.5 or earlier, where Contributor-role users exist. The sources do not describe further conditions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T19:18:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-54854","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54854","severity":null,"published_at":"2026-10-30T19:18:26+00:00","modified_at":"2026-10-30T19:22:27+00:00","first_seen_at":"2026-10-30T19:25:29+00:00","fetched_at":"2026-10-30T19:25:29+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}