PT-2025-6606 · WordPress · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to make web requests to arbitrary...

CVE-2024-13741: Server-Side Request Forgery (SSRF)

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pmuploadimage function. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

CVE-2024-13740: Authorization Bypass Through User-Controlled Key

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.4.2 via the pmmessengershowmessages function due to missing validation on a user controlled key. This makes it possible for...

CVE-2025-26772

creationtimestamp| type| source ---|---|--- 2025-02-17 11:58:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114019106747667606 2025-02-17 12:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepz4mp5t2h 2025-02-17 14:02:18+00:00| seen|...

Samsung Email Access Control Error Vulnerability

Samsung Email is an email application developed by the Korean company Samsung SAMSUNG, designed to provide users with a convenient interface to manage and process email. Samsung Email suffers from an Access Control Error vulnerability that stems from an improper access control issue included in...

CVE-2025-22680

creationtimestamp| type| source ---|---|--- 2025-02-16 22:44:16+00:00| seen| https://infosec.exchange/users/cve/statuses/114015984159192636 2025-02-16 23:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidefpyto327 2025-02-17 00:40:32+00:00| seen|...

CVE-2024-56463

creationtimestamp| type| source ---|---|--- 2025-02-14 17:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdhacsw2g 2025-02-14 18:45:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5uda4wp62m 2025-02-14 19:57:09+00:00| seen|...

CVE-2025-24617

creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2zgyow2a 2025-02-14 15:45:35+00:00| seen| https://t.me/cvedetector/18093 2025-02-14 15:53:54+00:00| seen|...

CVE-2025-26522

creationtimestamp| type| source ---|---|--- 2025-02-14 12:16:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li56mkzjve2g 2025-02-14 13:30:25+00:00| seen| Telegram/mq9OGphltNzAfXrK28jKvoPpWjVBtqMeBmm56jWdzOViFs 2025-02-14 14:44:49+00:00| seen|...

Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Build all python bindings for all flavors Fixed the condition of alternatives for Tumbleweed and Leap 16 Handle logger exception when flushing already closed file Included passlib as a recommended dependency Make minion reconnecting on changing master...

CVE-2024-13692

creationtimestamp| type| source ---|---|--- 2025-02-14 05:25:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114000574448510025 2025-02-14 06:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4kigpvbe2h 2025-02-14 07:10:01+00:00| seen|...

CVE-2025-22961

creationtimestamp| type| source ---|---|--- 2025-02-13 23:16:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3szbkmug2x 2025-02-14 00:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li3xgczwtg24 2025-02-14 01:09:50+00:00|...

CVE-2025-26519

creationtimestamp| type| source ---|---|--- 2025-02-13 17:44:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3li3ahbyuoi26 2025-02-13 17:54:51+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/113997859449174513 2025-02-13 17:55:12+00:00| seen|...

CVE-2025-1094

creationtimestamp| type| source ---|---|--- 2025-02-13 13:06:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113996724606453819 2025-02-13 13:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2rgyzyqz2z 2025-02-13 14:34:40+00:00| seen|...

CVE-2024-39286

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7ca5wjm2p 2025-02-12 23:58:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113993626183933675 2025-08-26 13:26:33+00:00| seen|...

CVE-2024-39284

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7c5iaeo2a 2025-02-12 23:58:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113993626168638131 2025-08-26 13:26:33+00:00| seen|...

CVE-2025-25184

creationtimestamp| type| source ---|---|--- 2025-02-12 16:25:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113991847229088447 2025-02-12 17:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyog6avlh2x 2025-02-12 18:19:52+00:00| seen|...

CVE-2025-0110

creationtimestamp| type| source ---|---|--- 2025-02-12 16:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0110 2025-02-12 17:49:46+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113992177119940610 2025-02-12 19:03:20+00:00| seen|...

CVE-2025-26344

creationtimestamp| type| source ---|---|--- 2025-02-12 14:05:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113991296627327739 2025-02-12 14:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464584916003 2025-02-12 15:09:30+00:00| seen|...

CVE-2025-1190

creationtimestamp| type| source ---|---|--- 2025-02-12 10:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxwsii72a 2025-02-12 11:07:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4058 2025-02-12 12:41:37+00:00| seen| https://t.me/cvedetector/17836...