Skip to content
Metagauss vulnerabilities
Newest
-
metagauss eventprime
EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override
CVE-2026-118523
5.3 Medium
-
eventprime
WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerability
CVE-2026-42691
5.4 Medium
-
m a vinoth kumar frontend dashboard, metagauss profilegrid +1 more
Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
CVE-2026-103693
9.0 Critical
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability
CVE-2026-94663
8.5 High
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-62061
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
CVE-2026-77826
8.8 High
-
metagauss registrationmagic
RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity
CVE-2026-77794
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field
CVE-2026-77793
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field
CVE-2026-77792
7.5 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability
CVE-2026-82225
7.4 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-82221
Public exploit
7.1 High
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
CVE-2026-77790
5.5 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability
CVE-2026-73341
9.8 Critical
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification
CVE-2026-15208
5.3 Medium
-
metagauss profilegrid
ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group
CVE-2026-16290
5.3 Medium
-
metagauss profilegrid
ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group
CVE-2026-16289
4.3 Medium
-
metagauss profilegrid
ProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR
CVE-2026-16291
4.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification
CVE-2026-15257
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR
CVE-2026-15255
5.3 Medium
-
metagauss profilegrid
ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID
CVE-2026-12687
7.5 High
-
metagauss profilegrid
ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization
CVE-2026-12690
3.8 Low
-
metagauss profilegrid
ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization
CVE-2026-12689
5.4 Medium
-
metagauss profilegrid
ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery
CVE-2026-12688
6.5 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability
CVE-2026-57697
7.5 High
-
metagauss eventprime – events calendar, bookings and tickets
EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter
CVE-2026-13441
7.2 High
-
metagauss memberships and user profiles for woocommerce – profilegrid woocommerce integration
Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation
CVE-2026-11359
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57759
8.8 High
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter
CVE-2026-12158
8.8 High
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
CVE-2026-12073
9.8 Critical
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request
CVE-2026-9242
5.3 Medium
-
eventprime
WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability
CVE-2026-56053
8.8 High
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
CVE-2026-4610
6.4 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability
CVE-2026-49764
9.8 Critical
-
eventprime
WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability
CVE-2026-42687
8.1 High
-
eventprime
WordPress EventPrime plugin <= 4.3.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42686
7.1 High
-
eventprime
WordPress EventPrime plugin <= 4.3.0.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-39518
7.1 High
-
eventprime
WordPress EventPrime plugin <= 4.3.2.0 - Broken Access Control vulnerability
CVE-2026-42669
7.5 High
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
CVE-2026-4609
7.1 High
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
CVE-2026-4607
4.3 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter
CVE-2026-4608
6.5 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability
CVE-2026-32498
7.5 High
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25417
6.5 Medium
-
metagauss eventprime
WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability
CVE-2026-24378
9.8 Critical
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability
CVE-2026-24373
8.1 High
-
metagauss eventprime
WordPress EventPrime plugin <= 4.2.6.0 - Broken Access Control vulnerability
CVE-2025-69358
7.5 High
-
metagauss eventprime
WordPress EventPrime plugin <= 4.2.8.3 - Payment Bypass vulnerability
CVE-2026-25312
7.5 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability
CVE-2026-32385
5.4 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
CVE-2026-2494
4.3 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
CVE-2026-2488
4.3 Medium
-
metagauss eventprime
WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability
CVE-2026-25389
5.3 Medium
- Show olderLoading…