Quick answers
- Is CVE-2026-76548 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-76548 being exploited in the wild.
- How severe is CVE-2026-76548?
- High severity, with a CVSS score of 8.2, published 29 August 2026.
- Which products and versions are affected?
- Cozmoslabs User Profile Builder before 4.0.1.
- Is there a fix for CVE-2026-76548?
- A patch was published on 2026-08-29: Fixed in version 4.0.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-76548 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-76548?
- Check whether you run Cozmoslabs User Profile Builder at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
User Profile Builder before version 4.0.1 contains an authentication bypass vulnerability (CWE-287) in its front-end file upload feature. The plugin fails to properly restrict file upload capabilities to authenticated users with appropriate roles, allowing unauthenticated attackers to list the site's media library and modify unpublished posts, pages, and media items belonging to other users. The vulnerability is exploitable remotely over the network without requiring any authentication or user interaction. An attacker can leverage this to enumerate and modify sensitive unpublished content. The fix is available in version 4.0.1 and later.
Affected products
- Cozmoslabs User Profile Builder before 4.0.1
Timeline
- 2026-08-27: disclosed
- 2026-08-29: patched: Fixed in version 4.0.1