UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-104995

BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value

Severity
High 8.1
Published
14 Oct 2026
Last changed
14 Oct 2026
Added to UpHeron
14 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Bp Profile Search (WordPress plugin)WordPress plugins · wp-plugin:bp-profile-search
  • Every version up to 5.9

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-104995