CVE-2026-105058

Summary

This flaw allows subscribers to escalate their privileges, potentially gaining full admin access, which can lead to data breaches and system compromise.

Exploitability

Exploitation is relatively straightforward given the preconditions of a subscriber account. The attacker would need to identify and exploit a vulnerability in the WP User Profiles plugin version 2.7.3 or earlier.

Blast radius

If exploited, the impact could be severe, as it could lead to unauthorized access to sensitive data and control over the entire WordPress site.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to WP User Profiles version 2.7.4 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.