23219 matches found
CVE-2026-12391
creationtimestamp| type| source ---|---|--- 2026-07-16 14:18:33+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqrgiqg5c22e...
CVE-2026-11386
creationtimestamp| type| source ---|---|--- 2026-07-16 13:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrehj3yns2w 2026-07-16 14:20:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqrglhi4kn2l 2026-07-16 15:20:46+00:00| seen|...
CVE-2026-60081
A flaw was found in DBI::ProfileData, a Perl module. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a specially crafted input. The flaw exists because the software does not properly limit the path index when processing profile dump files, which can lead to...
CVE-2026-15021
The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'location' Profile Field in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access...
CVE-2026-13741
The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. This is due to missing authorization and role validation in the digupdatewpwccustomfields function. This makes it possible for authenticat...
CVE-2026-15021
The wpForo Forum plugin for WordPress is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the 'location' Profile Field across all versions up to 3.1.1. The issue stems from insufficient input sanitization and output escaping; sanitize_text_field() at input does not encode double q...
CVE-2026-13741
The CVE-2026-13741 entry concerns the Digits: WordPress Mobile Number Signup and Login plugin for WordPress, vulnerable in all versions up to and including 9.1.0.5. The root cause is missing authorization and role validation in the dig_update_wpwc_custom_fields() function, allowing authenticated ...
EUVD-2026-44897
The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. This is due to missing authorization and role validation in the digupdatewpwccustomfields function. This makes it possible for authenticat...
CVE-2026-13741 Digits: WordPress Mobile Number Signup and Login <= 9.1.0.5 - Authenticated (Subscriber+) Privilege Escalation via 'digits_reg_userrole' Parameter
The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. This is due to missing authorization and role validation in the digupdatewpwccustomfields function. This makes it possible for authenticat...
CVE-2026-14380
A flaw was found in the DBI component for Perl. This vulnerability allows an attacker to inject and execute arbitrary code by manipulating the Profile attribute of a DBI handle. When a string is assigned to this attribute, the component processes it without proper validation, enabling the executi...
CVE-2026-57709
creationtimestamp| type| source ---|---|--- 2026-07-16 08:16:26+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsba2n3x2p...
CVE-2026-12907
creationtimestamp| type| source ---|---|--- 2026-07-16 08:05:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqrntt7kw2o...
CVE-2026-12395
creationtimestamp| type| source ---|---|--- 2026-07-16 07:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqsfnohs22...
CVE-2026-12906
creationtimestamp| type| source ---|---|--- 2026-07-16 07:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqkgc65d22...
CVE-2026-12525
The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowing users with at least the Subscriber role to escalate their privileges to Administrator by submitting a crafted value while updating their own profile...
CVE-2026-12525
The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowing users with at least the Subscriber role to escalate their privileges to Administrator by submitting a crafted value while updating their own profile...
CVE-2026-12525
CVE-2026-12525 affects the Redux Framework WordPress plugin prior to 4.5.13. The vulnerability arises because the plugin does not restrict which user_meta keys can be written when saving custom profile fields, enabling users with at least the Subscriber role to escalate to Administrator while upd...
CVE-2026-12525 Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator
The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowing users with at least the Subscriber role to escalate their privileges to Administrator by submitting a crafted value while updating their own profile...
EUVD-2026-44875
The Redux Framework WordPress plugin before 4.5.13 does not restrict which user meta keys can be written when saving custom profile fields, allowing users with at least the Subscriber role to escalate their privileges to Administrator by submitting a crafted value while updating their own profile...