John James Jacoby

Products

ProductCVEsExploitedLatest
bbPress2–Sep 11, 2026
WP User Profiles2–Oct 6, 2026
WP Media Categories1–Oct 22, 2025
WP Term Order1–Jan 23, 2026

Exploited and recent CVEs

  • CVE-2026-105058 High 8.8 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability 0.3%
  • CVE-2026-62137 Medium 5.3 WordPress bbPress plugin <= 2.6.14 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-74010 Medium 5.3 WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerability 0.3%
  • CVE-2026-24542 Medium 4.3 WordPress WP Term Order plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-60134 Medium 4.3 WordPress WP Media Categories Plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-31524 High 8.8 WordPress WP User Profiles plugin <= 2.6.2 - Privilege Escalation vulnerability 0.4%