CVE-2026-104995Published
BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-104995 · Microsoft / collected KEV context
cve-program · CVE-2026-104995
- https://www.wordfence.com/threat-intel/vulnerabilities/id/a35419ff-a342-4480-9288-e98dee5afabc?source=cve
- https://plugins.trac.wordpress.org/browser/bp-profile-search/tags/5.9/bps-directory.php#L408
- https://plugins.trac.wordpress.org/browser/bp-profile-search/tags/5.9/bps-directory.php#L186
- https://plugins.trac.wordpress.org/browser/bp-profile-search/tags/5.9/bps-search.php#L6
- https://plugins.trac.wordpress.org/changeset/3737650
- https://plugins.trac.wordpress.org/browser/bp-profile-search/tags/6.0/bps-directory.php
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.