Advisories · Technology

John James Jacoby WP User Profiles.

Every CVE that names John James Jacoby WP User Profiles among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105058 CVE record

CVSS 8.8 High

WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability
- John James Jacoby WP User Profiles
- Privilege escalation
Not analysed yet 6 Oct 2026
CVE-2025-31524 CVE record

CVSS 8.8 High

WordPress WP User Profiles plugin <= 2.6.2 - Privilege Escalation vulnerability
- John James Jacoby WP User Profiles
- Privilege escalation
Not analysed yet 10 Apr 2025