PULSEUnderground Intel

EN VIVO28señales / 24h

FEED

ransomwhitearmor reclama a KTU Shipyard · PH · Transportationransomsilentransomgroup reclama a Moritt Hock & Hamroff LLP · US · Professional Servicesransomsilentransomgroup reclama a P...ransomqilin reclama a TRAUCO AG · DE · Manufacturingransomqilin reclama a Honghwa International · TW · Manufacturingransomwallstreet reclama a Suburban Orthopaedics · US · Healthcareransomsilentransomgroup reclama a M... H...ransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomwhitearmor reclama a KTU Shipyard · PH · Transportationransomsilentransomgroup reclama a Moritt Hock & Hamroff LLP · US · Professional Servicesransomsilentransomgroup reclama a P...ransomqilin reclama a TRAUCO AG · DE · Manufacturingransomqilin reclama a Honghwa International · TW · Manufacturingransomwallstreet reclama a Suburban Orthopaedics · US · Healthcareransomsilentransomgroup reclama a M... H...ransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturing

← Todos los CVEs

CVE Watch30 oct 2026

CVE-2026-54854

Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.

CVSS

6.3

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 30 oct 2026 · Última mod.: 30 oct 2026 · CWE-266

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-profile-builder-plugin-4-0-5-privilege-escalation-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1180868.8 ALT

———Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.3h CVE-2026-1163869.8 CRÍ

———Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.7h CVE-2026-1195994.3 MED

———AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes. Attackers holding write_api_keys can mint keys with read_channels and query /admin/graphql to read every channel's configuration, including base URLs and model lists.7h CVE-2026-1180828.8 ALT

——0Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.7h CVE-2026-1186447.7 ALT

——3n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of the user who started the run, to the configured error workflow. A project editor can set a colleague's workflow settings.errorWorkflow to an error workflow they own, inherit the colleague's identity when that workflow fails, and resolve the colleague's per-user dynamic credential secrets.2d CVE-2026-1164714.3 MED

——3A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The manipulation of the argument role results in improper privilege management. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.3d