EUVD-2018-21829

BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters. Attackers can modify the fieldhiddenfile and fielddeleteimg parameters during profile editing to unlink...

CVE-2018-25308

Affected product: BuddyPress Xprofile Custom Fields Type 2.6.3. Vulnerability: remote code execution via unescaped POST parameters during profile editing, enabling authenticated users to delete arbitrary files by manipulating field_hiddenfile and field_deleteimg. Impact: high impact on confidenti...

CVE-2026-5712

creationtimestamp| type| source ---|---|--- 2026-04-29 19:01:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mknrwqq5hv2t 2026-05-05 14:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml4ebzet3f2o...

CVE-2026-7389

creationtimestamp| type| source ---|---|--- 2026-04-29 18:46:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknr4o3cid2q...

CVE-2026-42198

creationtimestamp| type| source ---|---|--- 2026-04-29 18:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknr2ukb6c2e 2026-04-30 20:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqfpeooje26 2026-04-30 21:00:30+00:00| seen|...

CVE-2026-40230

creationtimestamp| type| source ---|---|--- 2026-04-29 18:35:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknqixmmn22q...

CVE-2026-25710

creationtimestamp| type| source ---|---|--- 2026-04-29 17:00:09+00:00| seen| https://bsky.app/profile/brideoflinux.bsky.social/post/3mknl5umuci23 2026-05-13 12:52:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlqdtcpths2i...

CVE-2026-5141

creationtimestamp| type| source ---|---|--- 2026-04-29 16:36:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknjtyhwd42e 2026-04-30 21:58:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmbibsda2t...

CVE-2026-5166

creationtimestamp| type| source ---|---|--- 2026-04-29 16:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknixbwiho2e 2026-04-29 23:42:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkobnbgmuy2n 2026-04-30 03:00:43+00:00| seen|...

CVE-2026-42645

creationtimestamp| type| source ---|---|--- 2026-04-29 14:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkne2obrr22e...

CVE-2026-7092

A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization. The attack can be executed remotely. The exploit has been...

CVE-2026-7106

The Highland Software Custom Role Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 1.0.0. This is due to insufficient authorization checks in the hscrmsaveuserroles function, which is hooked to the personaloptionsupdate action accessible by any...

CVE-2026-42521

creationtimestamp| type| source ---|---|--- 2026-04-29 14:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknd2fatm72q...

CVE-2026-42522

creationtimestamp| type| source ---|---|--- 2026-04-29 14:29:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkncqtsprg2i...

CVE-2026-7276

creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a...

CVE-2026-7274

creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a...

CVE-2026-42412

creationtimestamp| type| source ---|---|--- 2026-04-29 10:38:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmvtgppe32t 2026-05-19 11:32:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm7c5tys652h...

CVE-2025-10503

creationtimestamp| type| source ---|---|--- 2026-04-29 10:27:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmv737e3m2o...

CVE-2026-42514

creationtimestamp| type| source ---|---|--- 2026-04-29 10:24:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmuzp73go2p...

CVE-2026-42377

creationtimestamp| type| source ---|---|--- 2026-04-29 10:21:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkmuusrnss2i 2026-04-29 10:56:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkmwtyllsu2w...