An unauthenticated authorization bypass in the User Profile Builder WordPress plugin allows remote attackers to manipulate site content and access unauthorized media files.

This vulnerability is an improper authentication flaw where the front-end file upload component fails to perform necessary capability checks. Consequently, unauthenticated visitors can perform actions restricted to administrative or privileged roles.

The ability for unauthenticated actors to modify unpublished pages and posts presents a severe risk to site integrity and content confidentiality. With a CVSS score of 8.2, this vulnerability allows for unauthorized data modification and potential information disclosure, which could lead to significant reputational damage or the distribution of malicious content via the site's media library.

Immediate Action: Update the User Profile Builder WordPress plugin to version 4.0.1 or later immediately to resolve the authentication bypass.

Proactive Monitoring: Review access logs for unusual requests directed at file upload or media management endpoints, particularly those originating from unauthenticated user sessions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious requests to plugin-specific upload endpoints until the software can be patched.

Public Exploit Available: No

Given the severity of this unauthenticated access vulnerability, organizations using the User Profile Builder plugin must prioritize the update to version 4.0.1. Failure to remediate this issue allows remote attackers to compromise the administrative integrity of the WordPress site. Ensure all affected instances are patched immediately to prevent unauthorized content manipulation.