Threats tagged 'ghsa-grj3-mv63-h3cw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-123659The ProfilePress WordPress plugin before 4.17.6 does not restrict the role and user meta filters its member Medium5.32026-11-11GCVE DatabaseCVE-2026-123659 A vulnerability in the ProfilePress WordPress plugin versions before 4.17.6 allows unauthenticated users to bypass configured restrictions on role and user meta filters in member directories. This enables attackers to list accounts that were intended to be hidden and to access user meta values of those listed users. Report on CVE-2026-123659 Vulnerability #ghsa-grj3-mv63-h3cw	GCVE Database	2026-11-11

Page 1 of 1