CVE-2026-16289

The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authenticated user such as a Subscriber to disclose the names and request dates of the users awaiting approval to join any group, including privat...

CVE-2023-5542

CVE-2023-5542 corresponds to an improper access control issue in Moodle: students in an "Only see own membership" group could view other students in the same group. This is corroborated by OSV and GHSA entries (BIT-MOODLE-2023-5542, GHSA-8MM2-M2GP-C6X2) describing the same behavior. Public refere...

UBUNTU-CVE-2022-40316

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...