CVE-2025-31524

WordPress WP User Profiles plugin <= 2.6.2 - Privilege Escalation vulnerability

Description

Incorrect Privilege Assignment vulnerability in John James Jacoby WP User Profiles wp-users-profiles allows Privilege Escalation.This issue affects WP User Profiles: from n/a through <= 2.6.2.

INFO

Published Date :

2025-04-10T08:09:41.061Z

Last Modified :

2026-04-01T15:48:56.579Z

Source :

Patchstack

AFFECTED PRODUCTS

The following products are affected by CVE-2025-31524 vulnerability.

Vendors	Products
Wordpress	Wordpress

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-31524.

URL	Resource
https://patchstack.com/database/Wordpress/Plugin/wp-users-profiles/vulnerability/wordpress-wp-user-profiles-plugin-2-6-2-privilege-escalation-vulnerability?_s_id=cve