{"id":"CVE-2026-4791","revision":"4994f0e321da4f65b06510b9e80b698c","records":[{"revision":"4994f0e321da4f65b06510b9e80b698c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-4791","aliases":[],"title":"PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute","description":"The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `logout-url` shortcode's 'button' attribute in all versions up to, and including, 8.2.36 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","state":0,"publishedAt":"2026-10-10T08:26:39.84+00:00","modifiedAt":"2026-10-11T12:13:43.385+00:00","affected":[{"ecosystem":"Vendor product","name":"PeproDev Ultimate Profile Solutions","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"peprodev\",\n                    \"product\": \"PeproDev Ultimate Profile Solutions\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"lessThanOrEqual\": \"8.2.36\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","score":6.4,"severity":"MEDIUM"}],"references":["https://www.wordfence.com/threat-intel/vulnerabilities/id/b33f655a-ad13-45d8-bad9-e7c2599c2490?source=cve","https://plugins.trac.wordpress.org/changeset/3719931/peprodev-ups","https://plugins.trac.wordpress.org/browser/peprodev-ups/tags/8.2.7/login/login.php#L1110"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-4791","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-4791","identifiers":["CVE-2026-4791"]},"retained":false,"historicalAffected":[]}],"coverage":[]}