CVE-2026-66701: WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions.

Affected Software

1 affected component

WordPress Profile Builder plugin<=3.16.5

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Profile Builder plugin to a version that resolves this vulnerability.
Fixed in 3.16.6

Aug 6, 2026

CVE Published

via MITRE·02:28 PM

Data Sourced

via MITRE·02:28 PM

RemedyDescriptionSeverityWeakness

CVE-2026-66701 has a medium severity rating of 5.3.

To fix CVE-2026-66701, update the WordPress Profile Builder plugin to version 3.16.6 or later.

CVE-2026-66701 is classified as a Broken Access Control vulnerability.

CVE-2026-66701 affects the WordPress Profile Builder plugin versions 3.16.5 and prior.

CVE-2026-66701 can be exploited without authentication, making it particularly critical.