Latest vulnerabilities for vendor "profilegrid"

Where

Sort:

Software

profilegrid user profiles, groups and communities

profilegrid wordpress plugin

profilegrid profilegrid – user profiles, groups and communities

profilegrid profilegrid

profilegrid profilegrid – user profiles, groups and communities (wordpress plugin)

profilegrid profilegrid – user profiles, memberships, groups and communities

profilegrid user profiles

ProfileGrid WordPress pluginProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group

Risk 22

Severity

4.3

First published (updated )

CVE-2026-16289

ProfileGrid WordPress pluginProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR

Risk 35

First published (updated )

CVE-2026-16291

ProfileGrid WordPress pluginProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery

Risk 40

Severity

6.5

First published (updated )

CVE-2026-12688

ProfileGrid WordPress pluginProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization

Risk 26

Severity

3.8

First published (updated )

CVE-2026-12690

ProfileGrid WordPress pluginProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization

Risk 34

Severity

5.4

First published (updated )

CVE-2026-12689

ProfileGrid ProfileGrid – User Profiles, Groups and CommunitiesProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining

Risk 48

Severity

7.1

First published (updated )

CVE-2026-4609

ProfileGrid ProfileGrid – User Profiles, Groups and Communities (WordPress plugin)ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification

Risk 22

Severity

4.3

First published (updated )

CVE-2026-4607

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function

Risk 27

Severity

6.1

EPSS

0.14%

First published (updated )

CVE-2025-6977

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection

Risk 79

Severity

8.8

First published (updated )

CVE-2025-0724

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management

Risk 22

Severity

4.3

First published (updated )

CVE-2025-1408

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection

Risk 38

Severity

6.5

First published (updated )

CVE-2025-0723

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure

Risk 22

Severity

4.3

First published (updated )

CVE-2024-13740

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery

Risk 34

Severity

5.4

First published (updated )

CVE-2024-13741

Metagauss Profilegrid WordpressWordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerability

Risk 79

Severity

8.8

First published (updated )

CVE-2024-37453

Metagauss Profilegrid WordpressProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference

Risk 16

Severity

4.3

EPSS

0.07%

First published (updated )

CVE-2024-6410

Metagauss Profilegrid WordpressProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation

Risk 56

Severity

8.8

EPSS

0.09%

First published (updated )

CVE-2024-6411

Metagauss Profilegrid WordpressProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization

Risk 16

Severity

4.3

EPSS

0.04%

First published (updated )

CVE-2024-3606

Trending

Vendor Risk Score

Software

ProfileGrid WordPress pluginProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group

ProfileGrid WordPress pluginProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR

ProfileGrid WordPress pluginProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery

ProfileGrid WordPress pluginProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization

ProfileGrid WordPress pluginProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization

Don't miss critical vulnerabilities

ProfileGrid ProfileGrid – User Profiles, Groups and CommunitiesProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining

ProfileGrid ProfileGrid – User Profiles, Groups and Communities (WordPress plugin)ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management

Don't miss critical vulnerabilities

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure

ProfileGrid User Profiles, Groups and CommunitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery

Metagauss Profilegrid WordpressWordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerability

Metagauss Profilegrid WordpressProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference

Don't miss critical vulnerabilities

Metagauss Profilegrid WordpressProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation

Metagauss Profilegrid WordpressProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization

Company

Resources

Contact