User Profile Builder is a WordPress plugin with over 40,000 active installations, used for managing user registration and profiles. A critical authentication bypass vulnerability (CVE-2026-15826) was discovered, allowing attackers to log in as the admin. The issue was fixed in version 3.16.5.