Related VulnerabilitiesPoCCVE-2026-15826: User Profile Builder 3.16.4 - Unauthenticated Authentication BypassWP User Manager /profile/admin/about 文件包含漏洞(CVE-2026-9290)WordPress ProfileGrid /wp-admin/admin-ajax.php SQL 注入漏洞(CVE-2024-30490)PoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionWP User Manager /profile/admin/about 本地文件包含漏洞Symfony /_profiler/phpinfo 信息泄露漏洞(CVE-2024-50340)Langflow /api/v1/files/profile_pictures/../secret_key 文件读取漏洞(CVE-2026-33497)PoCCVE-2024-30490: ProfileGrid <= 5.7.8 - SQL InjectionPoCumbraco-miniprofiler-exposure: Umbraco Mini Profiler - ExposuremJobtime /Default.aspx/update_profile_Server 命令执行漏洞(CVE-2025-51683)Langflow /api/v1/files/profile_pictures/../langflow.db 目录遍历漏洞