agentprime: peprodev-ultimate-profile-solutionsEvery new CVE for peprodev-ultimate-profile-solutions.https://agentprime.io/CVE-2026-4791: PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attributehttps://agentprime.io/advisories/CVE-2026-4791/https://agentprime.io/advisories/CVE-2026-4791/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 08:26:39 GMTCVECVE-2025-3921: PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Functionhttps://agentprime.io/advisories/CVE-2025-3921/https://agentprime.io/advisories/CVE-2025-3921/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 May 2025 01:43:08 GMTCVECVE-2025-3924: PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumerationhttps://agentprime.io/advisories/CVE-2025-3924/https://agentprime.io/advisories/CVE-2025-3924/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 May 2025 01:43:07 GMTCVECVE-2025-3844: PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeoverhttps://agentprime.io/advisories/CVE-2025-3844/https://agentprime.io/advisories/CVE-2025-3844/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 May 2025 01:43:07 GMTCVEcritical