541 matches found
WordPress plugin WP User Profiles 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-27520
creationtimestamp| type| source ---|---|--- 2025-04-04 00:59:47+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-33xw-247w-6hmc 2025-04-04 15:15:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114280346981280788 2025-04-04 15:15:09+00:00|...
CVE-2025-1408
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...
CVE-2024-54471
creationtimestamp| type| source ---|---|--- 2025-03-20 15:38:16+00:00| seen| https://bsky.app/profile/wts.dev/post/3lkszql3xpc2b 2025-03-20 17:07:57+00:00| seen| https://bsky.app/profile/hnws.bsky.social/post/3lkt6qxszvi2x 2025-03-20 17:08:05+00:00| seen|...
Samsung Notes Access Control Error Vulnerability
Samsung Notes is an application from the South Korean company Samsung SAMSUNG. An access control error vulnerability exists in Samsung Notes that stems from improper access control and can be exploited by an attacker to access data in multiple user profiles...
CVE-2025-20924
Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...
CVE-2025-20924
Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...
CVE-2025-20924
Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...
CVE-2025-20924
Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...
CVE-2025-20924
Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...
CVE-2025-20924
CVE-2025-20924 affects Samsung Notes prior to version 4.4.26.71. The issue is an improper access control bug that allows a physical attacker to access data across multiple user profiles on affected devices. Root cause is access-control failure within Samsung Notes’ multi-profile handling, enablin...
Samsung Notes 安全漏洞
Samsung Notes is an application from the South Korean company Samsung SAMSUNG. An access control error vulnerability exists in Samsung Notes that stems from improper access control and can be exploited by an attacker to access data in multiple user profiles...
ASB-A-376259166
In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-12038
The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyformsnav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input...
PT-2025-6606 · WordPress · Profilegrid
Name of the Vulnerable Software and Affected Versions: ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to make web requests to arbitrary...
Samsung Email Access Control Error Vulnerability
Samsung Email is an email application developed by the Korean company Samsung SAMSUNG, designed to provide users with a convenient interface to manage and process email. Samsung Email suffers from an Access Control Error vulnerability that stems from an improper access control issue included in...
CVE-2025-0589
CVE-2025-0589 affects Octopus Deploy when using Active Directory for authentication. An unauthenticated actor can issue API requests to two endpoints and retrieve data from the associated AD: one endpoint returns user profile details (Email address/UPN and Display name); the other returns group i...
CERTFR-2025-ACT-006
creationtimestamp| type| source ---|---|--- 2025-02-10 14:15:14+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/113980008875615207 2025-02-10 14:15:15+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lhtdf663cm2z 2025-02-11 09:00:04+00:00| seen|...