CVE-2026-30237

creationtimestamp| type| source ---|---|--- 2026-03-06 23:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgghhg377b2u...

CVE-2026-1644 WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection

The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...

CVE-2026-1644

The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...

CVE-2026-1644 WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection

The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...

CVE-2026-1644

CVE-2026-1644 pertains to the WP Frontend Profile plugin for WordPress, affected through version 1.3.8. The root cause is missing nonce validation in the update_action function, enabling Cross-Site Request Forgery. This allows unauthenticated attackers to influence user account registrations (app...

CVE-2026-30231

creationtimestamp| type| source ---|---|--- 2026-03-06 23:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgggagbehq27...

CVE-2026-30843

creationtimestamp| type| source ---|---|--- 2026-03-06 21:09:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgg7vhzc662u...

CVE-2026-29087

creationtimestamp| type| source ---|---|--- 2026-03-06 19:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgg3uyapxa2o 2026-03-07 09:30:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghjdj5siw2v 2026-04-15 07:07:08+00:00| seen|...

CVE-2025-69644

creationtimestamp| type| source ---|---|--- 2026-03-06 19:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfyps4ynz2k 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2026-30920

creationtimestamp| type| source ---|---|--- 2026-03-06 18:07:42+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-656w-6f6c-m9r6 2026-03-10 16:40:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30920...

CVE-2018-25186

creationtimestamp| type| source ---|---|--- 2026-03-06 15:53:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfobrsuw22z...

CVE-2018-25163

creationtimestamp| type| source ---|---|--- 2026-03-06 15:38:41+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgfngjdwrx2n...

EUVD-2018-21639

Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpoint. Attackers can craft HTML forms targeting the /kim/profile endpoint with hidden fields containing malicious user...

CVE-2018-25179

creationtimestamp| type| source ---|---|--- 2026-03-06 14:36:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfjxcv7do2z...

CVE-2018-25171

creationtimestamp| type| source ---|---|--- 2026-03-06 14:23:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfj7xvfhb2z...

CVE-2018-25173

creationtimestamp| type| source ---|---|--- 2026-03-06 14:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfil6jjyv2o...

CVE-2018-25188

creationtimestamp| type| source ---|---|--- 2026-03-06 14:07:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfid75x6u24...

CVE-2018-25182

creationtimestamp| type| source ---|---|--- 2026-03-06 14:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhz3hagy2e...

CVE-2018-25193

creationtimestamp| type| source ---|---|--- 2026-03-06 13:59:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfhuc7awt2e 2026-04-23 12:45:22+00:00| seen| https://infosec.exchange/users/certvde/statuses/116454085232361431 2026-04-23 12:49:00+00:00| seen|...

CVE-2018-25186

Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpoint. Attackers can craft HTML forms targeting the /kim/profile endpoint with hidden fields containing malicious user...