dontdream
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BP Profile Search | 2 | – | Oct 14, 2026 |
Exploited and recent CVEs
- CVE-2026-104995 BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value 1.1%
- CVE-2024-7850 BP Profile Search <= 5.7.5 - Cross-Site Request Forgery to Reflected Cross-Site Scripting 0.2%