CVE-2026-1360

BuddyPress <= 14.5.0 - Authenticated (Subscriber+) PHP Object Injection via XProfile Field Data

List of 8,007 websites affected by CVE-2026-1360

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
*******.*****.org	United States	,*
********.fr	France	,*
**********.org	United States	,*
*******.com	France	,*
***.org	United States	,*
********************.org	United States	,*
*************.org	France	,*
*******************.com	United States	,*
********.net	United States	*,*
********.hr	Croatia	*,*
*****.****.**.edu	United States	*,*
*************.org	United States	*,*
*****.****.com	United States	*,*
************.com	United States	*,*
*****.*************.org	United States	*,*
***.*****.com	United States	*,*
**.today	Ukraine	*,*
*******.******.com	United States	*,*
**********.org	United States	*,*
********.net	United States	*,*