{
 "id": "WPSEC-2026-2860",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2860/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2860/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2860/index.md",
 "title": "User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.6 - Unauthenticated Sensitive Information Exposure via Manual Excerpts and Comment Feeds of Restricted Posts",
 "description": "The User Profile Builder plugin for WordPress is vulnerable to Sensitive Information Exposure via manual post excerpts and comment feeds in all versions up to, and including, 4.0.6 due to the content restriction feature not filtering manual excerpts returned by get_the_excerpt and not filtering comments loaded by comment feed queries. This makes it possible for unauthenticated attackers to read the manual excerpts of restricted posts through feeds, search and the REST API, and to read comments posted on restricted posts through comment feeds.",
 "plugin": {
  "slug": "profile-builder",
  "name": "User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor",
  "full_name": "User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor",
  "wordpress_org": "https://wordpress.org/plugins/profile-builder/",
  "advisories_url": "https://wpsec.com/vuln/plugin/profile-builder/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/profile-builder"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": "2.6.9",
    "from_inclusive": true,
    "to": "4.0.7",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 2.6.9 before 4.0.7"
  ]
 },
 "introduced_in": "2.6.9",
 "fixed_in": "4.0.7",
 "remediation": "Update to 4.0.7 or later.",
 "fix_released": "2026-11-11T07:30:22+00:00",
 "published": "2026-11-12T17:52:14+00:00",
 "updated": "2026-11-12T17:07:15.871644+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2860/",
  "https://plugins.svn.wordpress.org/profile-builder/tags/4.0.7/",
  "https://wordpress.org/plugins/profile-builder/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/profile-builder",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-12"
 }
}