CVE-2026-104995 - BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value
CVE ID :CVE-2026-104995 Published : Oct. 14, 2026, 2:16 a.m. | 1 hour, 15 minutes ago Description :The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the client-controlled...