What is the CVSS score of EUVD-2026-53905?

EUVD-2026-53905 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.2%.

Profile Builder EUVD-2026-53905

| CVE-2026-66701 MEDIUM

Missing Authorization (CWE-862)

2026-08-06 Patchstack

GHSA-c8mr-q6p9-3x9w

WordPress Authentication Bypass Profile Builder Wordpress Plugin Cozmoslabs

5.3

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

5.3 MEDIUM

Network-reachable plugin handler requires no credentials (PR:N); only integrity impact applies as access control bypass enables unauthorized writes, not data reads or service disruption.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 06, 2026 - 16:02 vuln.today

CVE Published

Aug 06, 2026 - 14:28 cve.org

MEDIUM 5.3

DescriptionCVE.org

Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions.

AnalysisAI

Unauthenticated broken access control in the Profile Builder WordPress plugin (versions up to and including 3.16.5) allows remote, unauthenticated attackers to perform unauthorized write operations against plugin functionality - bypassing intended access restrictions without any credentials. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) confirms full network exploitability with no prerequisites, though impact is limited to low-severity integrity modifications with no confidentiality or availability consequences. No public exploit code or active exploitation has been identified at time of analysis.

Technical ContextAI

Profile Builder, developed by Cozmoslabs (CPE: cpe:2.3:a:cozmoslabs:profile_builder:*:*:*:*:*:*:*:*), is a WordPress plugin providing user registration, login, and front-end profile management capabilities. The root cause is CWE-862 (Missing Authorization), a class of flaw where server-side code executes a sensitive action without verifying the requestor has the required permission. In WordPress plugin architecture this typically manifests as REST API endpoints, AJAX handlers (wp_ajax_nopriv_* hooks), or form submission handlers that lack a capability check (e.g., current_user_can()) or nonce verification tied to a logged-in session, allowing unauthenticated HTTP requests to trigger privileged operations. The vulnerability was reported by Patchstack and catalogued under ENISA EUVD-2026-53905.

RemediationAI

Upgrade Profile Builder to a version released after 3.16.5. No exact fixed version number was provided in the available input data - consult the official Patchstack advisory (https://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-profile-builder-plugin-3-16-5-broken-access-control-vulnerability) and the WordPress plugin repository changelog to identify the first patched release. If an immediate upgrade is not feasible, a compensating control is to temporarily deactivate the Profile Builder plugin on publicly accessible sites, accepting the trade-off of disabling user registration and profile management functionality. Alternatively, a Web Application Firewall rule blocking unauthenticated POST requests to Profile Builder's AJAX or REST endpoints can reduce exposure, though the specific endpoint is not named in the advisory. WordPress site administrators should also audit whether Profile Builder's access-controlled features (e.g., role assignment on registration, restricted form access) have been abused by reviewing recent user accounts created without expected authentication context.