<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: whyun-wpcom-member</title><description>Every new CVE for whyun-wpcom-member.</description><link>https://agentprime.io/</link><item><title>CVE-2026-104803: WPCOM Member &lt;= 1.7.27 - Unauthenticated Authentication Bypass via &apos;uuid&apos; and &apos;code&apos; Parameters on Social-Login Callback</title><link>https://agentprime.io/advisories/CVE-2026-104803/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104803/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 07:41:44 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-14002: WPCOM Member &lt;= 1.7.16 - Authentication Bypass via Weak OTP</title><link>https://agentprime.io/advisories/CVE-2025-14002/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14002/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 16 Dec 2025 09:20:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-11920: WPCOM Member &lt;= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode</title><link>https://agentprime.io/advisories/CVE-2025-11920/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11920/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 01 Nov 2025 01:47:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2221: WPCOM Member &lt;= 1.7.6 - Unauthenticated Time-Based SQL Injection</title><link>https://agentprime.io/advisories/CVE-2025-2221/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2221/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Mar 2025 06:43:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-1475: WPCOM Member &lt;= 1.7.5 - Authentication Bypass via &apos;user_phone&apos;</title><link>https://agentprime.io/advisories/CVE-2025-1475/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-1475/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 Mar 2025 06:40:02 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-7493: WPCOM Member &lt;= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta</title><link>https://agentprime.io/advisories/CVE-2024-7493/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7493/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Sep 2024 13:55:20 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>