{"vulnerability": "cve-2026-15826", "sightings": [{"uuid": "8535036c-403c-4458-b3cb-7d9e82e7d9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mt3s65m3s72u", "content": "CVE-2026-15826 (CVSS 9.8) is a User Profile Builder vulnerability letting attackers log in as WordPress admin. Over 40,000 sites affected; update to 3.16.5\n\n#CVE202615826 #WordPress #UserProfileBuilder #InfoSec", "creation_timestamp": "2026-08-15T04:04:23.746633Z"}, {"uuid": "a266cf21-13ed-4d1f-8df5-ae05eac041c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15826", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117098350030600158", "content": "CVE-2026-15826: CRITICAL flaw in User Profile Builder (\u22643.16.4) allows auth bypass via type conversion error. Attackers gain admin (user ID 1) access. Restrict registration or disable plugin. Details: https://radar.offseq.com/threat/cve-2026-15826-cwe-704-incorrect-type-conversion-or-cast-in-cozmoslabs-user-profile-builder-beautiful-03ed293eb36de594 #OffSeq #WordPress #Infosec #CVE", "creation_timestamp": "2026-08-15T07:30:23.350152Z"}, {"uuid": "177ea5bd-25d3-4712-9393-4cff8b059b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15826", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt45okhdan2t", "content": "CRITICAL: User Profile Builder \u22643.16.4 has an auth bypass (CVE-2026-15826). Attackers can gain admin access. Disable plugin or restrict registration until a patch arrives. https://radar.offseq.com/threat/cve-2026-15826-cwe-704-incorrect-type-conversion-or-cast-in-cozmoslabs-user-profile-builder-b...", "creation_timestamp": "2026-08-15T07:30:25.620292Z"}, {"uuid": "4d0ae699-f404-4eed-8af0-b025f306917e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dfhmoikfql5b4", "content": "CVE-2026-15826 - User Profile Builder\nCVE ID : CVE-2026-15826\n \n Published : Aug. 15, 2026, 7:16 a.m. | 56\u00a0minutes ago\n \n Description : The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.1...", "creation_timestamp": "2026-08-15T08:35:10.071659Z"}, {"uuid": "bc498fae-ab3f-49f8-b86f-90f1d531edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt4elfl6d62w", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3User Profile Builder 3.16.4\u4ee5\u524d\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u4e0d\u6b63\u306a\u30e6\u30fc\u30b6\u30fc\u540d\u3067\u767b\u9332\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u7ba1\u7406\u8005\u6a29\u9650\u3067\u30ed\u30b0\u30a4\u30f3\u53ef\u80fd\u306b\u306a\u308b\u3002\nCVE-2026-15826 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-15T09:33:56.061692Z"}, {"uuid": "3cfa2b67-f7b6-4d90-80be-34d167e04adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4ewfqjs72e", "content": "CVE-2026-15826 - user profile builder \u2013 beautiful user registration forms, user profiles & user role editor\nAn attacker can gain full control of a WordPress site by exploiting a security weakness in the User\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cozmoslabs #CVE #infosec", "creation_timestamp": "2026-08-15T09:40:04.549021Z"}, {"uuid": "0228e361-1c49-4edb-914d-a64c8720c894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4jfrceyo27", "content": "\ud83d\udd34 CVE-2026-15826 - Critical (9.8)\n\nThe User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Con...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15826/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T11:00:15.878804Z"}]}