Lucene search
+L

6 matches found

Cvelist
Cvelist
added 2026/08/03 6:0 a.m.47 views

CVE-2026-16289 ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group

The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authenticated user such as a Subscriber to disclose the names and request dates of the users awaiting approval to join any group, including privat...

0.00162EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-64054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not...

5.3AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/19 3:39 p.m.13 views

EUVD-2026-45627

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

5.3AI score0.00166EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/19 3:39 p.m.6 views

CVE-2026-64054 net: shaper: reject duplicate leaves in GROUP request

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

5.3AI score
SaveExploits0References6
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.10 views

WordPress ProfileGrid plugin <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management vulnerability

Missing Authorinzation to Authenticated Subscriber+ Join Group Requests Management vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ProfileGrid versions = 5.9.4.4...

4.3CVSS5.9AI score0.00276EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/03/22 5:15 a.m.9 views

CVE-2025-1408

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...

4.3CVSS5.8AI score0.00276EPSS
SaveExploits0References3
Rows per page
Query Builder