CVE-2026-1271

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.7.2 via the 'pmuploadimage' and 'pmuploadcoverimage' AJAX actions. This is due to the updateusermeta function being called outsi...

CVE-2026-2093

creationtimestamp| type| source ---|---|--- 2026-02-06 11:13:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10698-1ab75-2.html 2026-02-10 07:19:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meigeawdvf2v 2026-02-10 07:19:53+00:00| seen|...

CVE-2026-21643

creationtimestamp| type| source ---|---|--- 2026-02-06 10:00:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me6nhfw7lq23 2026-02-06 15:33:53+00:00| seen| https://infosec.exchange/users/decio/statuses/116024412137620292 2026-02-09 09:16:18+00:00| seen|...

Security Bulletin: Vulnerability in IBM WebSphere Application (CVE-2025-7962) affects IBM PowerVM Novalink.

Summary IBM WebSphere Libery Profile is used by IBM PowerVM Novalink. IBM PowerVM Novalink has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-7962 DESCRIPTION: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to...

CVE-2026-1953

Nukegraphic CMS v3.1.2 contains a stored cross-site scripting XSS vulnerability in the user profile edit functionality at /ngc-cms/user-edit-profile.php. The application fails to properly sanitize user input in the name field before storing it in the database and rendering it across multiple CMS...

CVE-2026-25583

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.3, there is a heap buffer overflow vulnerability in CIccFileIO::Read8 when processing malformed ICC profile files via unchecked fread...

Zulip 跨站脚本漏洞

Zulip is a powerful open-source chat application developed by the American company Zulip Corporation. It combines the immediacy of real-time conversations with the productivity benefits of threaded dialogue. Versions of Zulip from 5.0 to 11.5 had a cross-site scripting vulnerability. This...

CVE-2026-25233

creationtimestamp| type| source ---|---|--- 2026-02-05 23:51:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5lhboc2o2g...

CVE-2026-25235

creationtimestamp| type| source ---|---|--- 2026-02-05 23:39:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5kqyjyhx2a...

CVE-2026-25241

creationtimestamp| type| source ---|---|--- 2026-02-05 23:19:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jnzxtf22r...

CVE-2026-24300

creationtimestamp| type| source ---|---|--- 2026-02-05 23:18:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jlie2cq25 2026-02-06 06:19:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116022231087463563 2026-02-10 17:30:28+00:00| seen|...

CVE-2025-15311

creationtimestamp| type| source ---|---|--- 2026-02-05 20:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me56l46zab2h...

CVE-2026-25520

creationtimestamp| type| source ---|---|--- 2026-02-05 17:33:12+00:00| published-proof-of-concept| https://github.com/nyariv/SandboxJS/security/advisories/GHSA-58jh-xv4v-pcx4 2026-02-06 20:18:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me7py5auaf25 2026-02-06...

CVE-2025-67189

creationtimestamp| type| source ---|---|--- 2026-02-05 15:53:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me4qpi5twf2m...

CVE-2025-69970

creationtimestamp| type| source ---|---|--- 2026-02-05 15:52:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me4qp2ndur2a...

CVE-2026-20732

creationtimestamp| type| source ---|---|--- 2026-02-05 14:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me4nhuumkx2q...

CVE-2026-1271

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.7.2 via the 'pmuploadimage' and 'pmuploadcoverimage' AJAX actions. This is due to the updateusermeta function being called outsi...

EUVD-2026-5546

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.7.2 via the 'pmuploadimage' and 'pmuploadcoverimage' AJAX actions. This is due to the updateusermeta function being called outsi...

CVE-2026-1271 ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.7.2 via the 'pmuploadimage' and 'pmuploadcoverimage' AJAX actions. This is due to the updateusermeta function being called outsi...

CVE-2026-1271 ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.9.7.2 via the 'pmuploadimage' and 'pmuploadcoverimage' AJAX actions. This is due to the updateusermeta function being called outsi...