Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-105058 2 John James Jacoby, Wordpress-extensions 2 Wp User Profiles, Wp User Profiles 2026-10-06 8.8 High
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
CVE-2026-62137 2 John James Jacoby, Wordpress 2 Bbpress, Wordpress 2026-09-12 5.3 Medium
Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions.
CVE-2026-74010 2 John James Jacoby, Wordpress 2 Bbpress, Wordpress 2026-09-02 5.3 Medium
Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14.