Skip to content
OpenAdvisories

Archive

29 August 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2026-76547 Public exploit

    Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/Export

    The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a configuration file, allowing high privilege users such as administrators to conduct PHP Object Injection. The affected feature is a f…