Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 13:24:18 +0000 CVE-2026-19251 — Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity https://vulnerability.circl.lu/vuln/cve-2026-19251 <p><strong>Affected:</strong> Unknown Ultimate Member</p> <p>The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation.</p> <p><strong>Affected:</strong> Unknown Ultimate Member</p> <p>The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation.</p> https://vulnerability.circl.lu/vuln/cve-2026-19251