CVE-2026-66701 WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

CVE-2026-18733

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:29+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzfzvftr23...

CVE-2025-15039

creationtimestamp| type| source ---|---|--- 2026-08-06 09:02:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msfom6scl22m 2026-08-06 09:55:32+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3msfrlrarfi2s 2026-08-08 20:52:26+00:00| seen|...

CVE-2026-19021

creationtimestamp| type| source ---|---|--- 2026-08-06 08:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cqhoz3infbyc4...

CVE-2026-18597

creationtimestamp| type| source ---|---|--- 2026-08-06 08:40:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bvtg77ftldk5t...

CVE-2026-20313

creationtimestamp| type| source ---|---|--- 2026-08-06 08:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msfl6xfic22t 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m...

WP < 7.0.3 - Subscriber+ Email Change Confirmation Bypass

Description WordPress does not always validate a new email address consistently when a profile is updated, which could allow any authenticated user to change their account email address without completing the ownership confirmation step...

CVE-2026-69111

creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msegc7qffv2n...

CVE-2026-70617

creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msegbz4rzb2t...

CVE-2026-66298

creationtimestamp| type| source ---|---|--- 2026-08-05 20:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedznuqkh2a...

CVE-2026-9196

creationtimestamp| type| source ---|---|--- 2026-08-05 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msecwr4gzi2b...

CVE-2026-20312

creationtimestamp| type| source ---|---|--- 2026-08-05 18:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mse4avokdr2t 2026-08-05 18:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76v5c3vhzde4z 2026-08-06 13:10:12+00:00| seen|...

CVE-2026-9077

creationtimestamp| type| source ---|---|--- 2026-08-05 18:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mse4aiafpl2x 2026-08-05 18:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3rfvjndj5taqu 2026-08-07 15:07:06+00:00| seen|...

CVE-2026-9193

creationtimestamp| type| source ---|---|--- 2026-08-05 17:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzu72j3b23 2026-08-06 16:15:53+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-7557

creationtimestamp| type| source ---|---|--- 2026-08-05 17:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdzn25ytt2h 2026-08-06 16:15:44+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781...

CVE-2026-15573

creationtimestamp| type| source ---|---|--- 2026-08-05 16:59:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdytdptqw22 2026-08-05 23:02:49+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117045393405816451 2026-08-05 23:02:49+00:00| seen|...

CVE-2026-20304

creationtimestamp| type| source ---|---|--- 2026-08-05 16:51:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msdyet7jwc24 2026-08-05 17:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mse23e2oxs2p 2026-08-06 03:17:09+00:00| seen|...

EUVD-2026-53470

A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. This affects the function storeProfileImage of the file studentprofilepic.php of the component Shared Upload Helper. Executing a manipulati...

CVE-2026-18927

CVE-2026-18927 affects imranrisal-dev Student-Management-System, specifically the Shared Upload Helper’s file student_profile_pic.php function storeProfileImage. An attacker can manipulate the argument choose_file to achieve unrestricted file upload, with the attack executable remotely. The explo...

CVE-2026-50749

creationtimestamp| type| source ---|---|--- 2026-08-05 15:43:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/hhbopx5ltrfbd...