What’s Vulnerable › Products

dontdream BP Profile Search vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your dontdream BP Profile Search version is affected

Latest dontdream BP Profile Search vulnerabilities

• CVE-2026-104995 — BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value (CVSS 8.1)
• CVE-2024-7850 — BP Profile Search <= 5.7.5 - Cross-Site Request Forgery to Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2024-22293 — WordPress BP Profile Search Plugin <= 5.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)