John James Jacoby CVEs and Security Vulnerabilities - OpenCVE

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-105058

WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

John James Jacoby Wordpress-extensions

Products

Wp User Profiles Wp User Profiles

CVE-2026-62137

WordPress bbPress plugin <= 2.6.14 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

John James Jacoby Wordpress

Products

Bbpress Wordpress

CVE-2026-74010

WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

John James Jacoby Wordpress

Products

Bbpress Wordpress

Page 1 of 1.