A vulnerability, which was classified as problematic, was found in WP Frontend Profile Plugin up to 1.3.8 on WordPress. This vulnerability affects the function update_action. Such manipulation leads to cross-site request forgery.

This vulnerability is traded as CVE-2026-1644. The attack may be launched remotely. There is no exploit available.