What is GHSA-ff29-gmhf-78ff?

GHSA-ff29-gmhf-78ff is a security advisory published by GitHub Security Advisories with Medium severity. The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its...

Which CVE IDs does GHSA-ff29-gmhf-78ff cover?

GHSA-ff29-gmhf-78ff covers the following CVE IDs: CVE-2026-76546. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-ff29-gmhf-78ff?

GHSA-ff29-gmhf-78ff has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-ff29-gmhf-78ffMediumCVSS 6.8

The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its...

Vendor

GitHub Security Advisories

Published

August 29, 2026

Last Modified

August 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-76546 →

📋 Description

The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowing users with a role as low as contributor to perform Stored Cross-Site Scripting attacks against any user viewing the affected content, including administrators. The shortcode is not enabled by default.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-76546
https://wpscan.com/vulnerability/2c67d682-3e11-4fcd-9aae-ab7895d5da67
https://github.com/advisories/GHSA-ff29-gmhf-78ff