CVE-2026-19251

The Ultimate Member WordPress plugin before 2.13.0 allows unauthenticated visitors to read comments still awaiting moderation by querying profile activity, due to a missing check on comment approval status and profile privacy. The vulnerability was discovered by Alessandro Greco (Aleff) and Giova...

CVE-2026-19251 Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity

The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation...

CVE-2026-57714

creationtimestamp| type| source ---|---|--- 2026-07-13 10:56:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjjrvbgcs2g 2026-07-13 11:11:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjknmwz7j2a 2026-07-13 11:20:04+00:00| seen|...

CVE-2026-32174

creationtimestamp| type| source ---|---|--- 2026-06-19 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3momj2bqrjp26 2026-06-19 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116774890711719017...

EUVD-2020-5575

Malware in sbrugna...

CVE-2024-44254

creationtimestamp| type| source ---|---|--- 2025-07-15 04:32:32+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d 2025-07-15 04:32:34+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d 2025-10-01 18:11:57+00:00| seen|...

CVE-2025-6322

creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18922 2025-06-20 10:01:43+00:00| published-proof-of-concept| Telegram/p4cwm2yjSN4ovrDbIKK0UGlBzlMUWXB5O0q8DxAqqucQZuA 2025-06-20 10:36:31+00:00| seen|...

CVE-2025-46341

creationtimestamp| type| source ---|---|--- 2025-06-04 21:18:13+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqsq64pjlt42 2025-06-04 22:47:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsv6g2q352s...

CVE-2025-48960

creationtimestamp| type| source ---|---|--- 2025-06-04 14:21:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqryti3u2fg2 2025-06-04 16:43:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsaszsiid25 2025-06-04...

CVE-2025-5455

creationtimestamp| type| source ---|---|--- 2025-06-02 08:58:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmfvwgaxum2 2025-06-02 10:00:20+00:00| seen| Telegram/Z4OmYLYXr8OknacjOfloyfEZDXcvg0r3r1T6XVnH9iHBbo 2025-06-02 11:52:35+00:0...

CVE-2025-2571

creationtimestamp| type| source ---|---|--- 2025-05-30 15:31:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfkewl7lmc2 2025-05-30 16:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqfmibtbg52p...

CVE-2025-5082

creationtimestamp| type| source ---|---|--- 2025-05-28 07:45:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7phtti7lc2 2025-05-28 10:13:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7xqzyjdr2w...

CVE-2021-27288

Cross Site Scripting XSS in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "Comment" field in "/profile/activity" page...

CVE-2020-13315

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile activity page was not restricting the amount of results one could request, potentially resulting in a denial of service...

CVE-2025-47893

creationtimestamp| type| source ---|---|--- 2025-05-14 06:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp4dipiss22j...

CVE-2024-45371

creationtimestamp| type| source ---|---|--- 2025-05-13 21:31:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16243 2025-05-13 22:08:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hoigputq2...

CVE-2024-46895

creationtimestamp| type| source ---|---|--- 2025-05-13 21:31:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16242 2025-05-13 22:08:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hogyqzry2...

CVE-2025-43955

creationtimestamp| type| source ---|---|--- 2025-04-20 19:41:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnbfs7slbz42 2025-04-20 22:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnbqbjxoj72d 2025-04-20...

CVE-2025-31200

creationtimestamp| type| source ---|---|--- 2025-04-16 17:33:02+00:00| seen| https://infosec.exchange/users/applsec/statuses/114348836934305541 2025-04-16 17:33:04+00:00| seen| https://bsky.app/profile/applsec.bsky.social/post/3lmx4qr3utx2e 2025-04-16 18:18:24+00:00| seen|...

PT-2025-2952 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest version of Discourse core Description: Discourse is an open source platform for community discussion. In affected versions with some combinations of plugins, and with CSP disabled, activity streams in th...