https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T16:15:06.697470+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-103693 CVE-2026-103693 — Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection 2026-10-29T16:15:06.698678+00:00

Affected: Unknown Frontend Dashboard, Unknown ProfileGrid

The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to arbitrary file write and potential remote code execution.