https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:58:26.629552+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286407 EUVD-2026-286407 2026-10-06T20:58:26.678197+00:00 EUVD-2026-286407 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13741 fkie_cve-2024-13741 2026-10-06T20:58:26.678239+00:00

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pm_upload_image function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to download and view images, as well as validating if a non-image file exists, both on local or remote hosts.

 https://cve.radiocsirt.org/vuln/ghsa-97wg-4gj3-g8cw GHSA-97wg-4gj3-g8cw 2026-10-06T20:58:26.678278+00:00

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pm_upload_image function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to download and view images, as well as validating if a non-image file exists, both on local or remote hosts.