A vulnerability was found in PeproDev Ultimate Profile Solutions Plugin 1.9.1/7.5.2 on WordPress. It has been classified as problematic. Affected is the function
handel_ajax_req of the component User Meta Update Handler. The manipulation leads to missing authorization.
This vulnerability is traded as CVE-2025-3921. It is possible to launch the attack remotely. There is no exploit available.
