{"vulnerability": "cve-2026-15826", "sightings": [{"uuid": "b54ca179-d58b-4975-9f15-09f194c3291b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15826.yaml", "content": "", "creation_timestamp": "2026-08-22T00:00:09.544251Z"}, {"uuid": "8535036c-403c-4458-b3cb-7d9e82e7d9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mt3s65m3s72u", "content": "CVE-2026-15826 (CVSS 9.8) is a User Profile Builder vulnerability letting attackers log in as WordPress admin. Over 40,000 sites affected; update to 3.16.5\n\n#CVE202615826 #WordPress #UserProfileBuilder #InfoSec", "creation_timestamp": "2026-08-15T04:04:23.746633Z"}, {"uuid": "c1f93ab4-9aea-4456-af44-e8ce86b7703f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-19T00:00:26.890869Z"}, {"uuid": "a266cf21-13ed-4d1f-8df5-ae05eac041c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15826", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117098350030600158", "content": "CVE-2026-15826: CRITICAL flaw in User Profile Builder (\u22643.16.4) allows auth bypass via type conversion error. Attackers gain admin (user ID 1) access. Restrict registration or disable plugin. Details: https://radar.offseq.com/threat/cve-2026-15826-cwe-704-incorrect-type-conversion-or-cast-in-cozmoslabs-user-profile-builder-beautiful-03ed293eb36de594 #OffSeq #WordPress #Infosec #CVE", "creation_timestamp": "2026-08-15T07:30:23.350152Z"}, {"uuid": "177ea5bd-25d3-4712-9393-4cff8b059b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15826", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt45okhdan2t", "content": "CRITICAL: User Profile Builder \u22643.16.4 has an auth bypass (CVE-2026-15826). Attackers can gain admin access. Disable plugin or restrict registration until a patch arrives. https://radar.offseq.com/threat/cve-2026-15826-cwe-704-incorrect-type-conversion-or-cast-in-cozmoslabs-user-profile-builder-b...", "creation_timestamp": "2026-08-15T07:30:25.620292Z"}, {"uuid": "4d0ae699-f404-4eed-8af0-b025f306917e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dfhmoikfql5b4", "content": "CVE-2026-15826 - User Profile Builder\nCVE ID : CVE-2026-15826\n \n Published : Aug. 15, 2026, 7:16 a.m. | 56\u00a0minutes ago\n \n Description : The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.1...", "creation_timestamp": "2026-08-15T08:35:10.071659Z"}, {"uuid": "bc498fae-ab3f-49f8-b86f-90f1d531edb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt4elfl6d62w", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3User Profile Builder 3.16.4\u4ee5\u524d\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u4e0d\u6b63\u306a\u30e6\u30fc\u30b6\u30fc\u540d\u3067\u767b\u9332\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u7ba1\u7406\u8005\u6a29\u9650\u3067\u30ed\u30b0\u30a4\u30f3\u53ef\u80fd\u306b\u306a\u308b\u3002\nCVE-2026-15826 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-15T09:33:56.061692Z"}, {"uuid": "3cfa2b67-f7b6-4d90-80be-34d167e04adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4ewfqjs72e", "content": "CVE-2026-15826 - user profile builder \u2013 beautiful user registration forms, user profiles & user role editor\nAn attacker can gain full control of a WordPress site by exploiting a security weakness in the User\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cozmoslabs #CVE #infosec", "creation_timestamp": "2026-08-15T09:40:04.549021Z"}, {"uuid": "0228e361-1c49-4edb-914d-a64c8720c894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4jfrceyo27", "content": "\ud83d\udd34 CVE-2026-15826 - Critical (9.8)\n\nThe User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Con...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15826/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T11:00:15.878804Z"}, {"uuid": "c0c46163-f66e-4370-b132-d850df48fdb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-18T04:00:03.428824Z"}, {"uuid": "beb8eaee-88f1-4ef3-b745-a8dbf503a183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15826.yaml", "content": "", "creation_timestamp": "2026-08-20T00:00:10.076884Z"}, {"uuid": "f17e9279-9b11-4141-b503-f8ab27700f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mt4sp6h66x26", "content": "CVE-2026-15826 is trending. Hype score 4, currently #4 on cvemon.\n\nThe User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_user()\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-15826", "creation_timestamp": "2026-08-15T13:46:34.566842Z"}, {"uuid": "17ab3fe3-31eb-461e-9bac-d52d51463c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15826", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mtfxx7avej2q", "content": "Critical WordPress Alert: Dissecting CVE-2026-15748 (Forminator RCE) & CVE-2026-15826 (UPB Auth\u00a0Bypass)\n\nCVE-2026-15748 enables critical Forminator RCE, while CVE-2026-15826 allows User Profile\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-15748-forminator-rce-cve-2026-15826-user-profile-builder/", "creation_timestamp": "2026-08-19T05:14:30.867600Z"}, {"uuid": "985d367c-b628-44e4-adce-3e66159b1dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15826.yaml", "content": "", "creation_timestamp": "2026-08-19T06:00:05.410724Z"}, {"uuid": "22f19cf4-559d-4e56-b1ec-63b11fe9818a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt5sjjdnhm2s", "content": "CVE-2026-15826 profile-builder (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T23:16:04.703193Z"}, {"uuid": "806ec930-e549-4c4d-8086-2594d39d6630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15826.yaml", "content": "", "creation_timestamp": "2026-08-21T00:00:07.214703Z"}, {"uuid": "ce974681-4ffc-423e-b9e4-a12bed3d04fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "published-proof-of-concept", "source": "Telegram/BjeVsXpYrNsRv6BrV8OD2OomoRwSN7YqQdY-9YF4AutvMEI", "content": "", "creation_timestamp": "2026-09-02T01:00:05.141948Z"}, {"uuid": "c0b6b5ed-78bc-44d5-a4ab-ae97c113bd15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "published-proof-of-concept", "source": "Telegram/BjeVsXpYrNsRv6BrV8OD2OomoRwSN7YqQdY-9YF4AutvMEI", "content": "", "creation_timestamp": "2026-09-03T00:01:00.320653Z"}]}