Skip to content
Metagauss Profilegrid vulnerabilities
-
m a vinoth kumar frontend dashboard, metagauss profilegrid +1 more
Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
CVE-2026-103693
9.0 Critical
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability
CVE-2026-94663
8.5 High
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-62061
5.3 Medium
-
metagauss profilegrid
ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group
CVE-2026-16290
5.3 Medium
-
metagauss profilegrid
ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group
CVE-2026-16289
4.3 Medium
-
metagauss profilegrid
ProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR
CVE-2026-16291
4.3 Medium
-
metagauss profilegrid
ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID
CVE-2026-12687
7.5 High
-
metagauss profilegrid
ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization
CVE-2026-12690
3.8 Low
-
metagauss profilegrid
ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization
CVE-2026-12689
5.4 Medium
-
metagauss profilegrid
ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery
CVE-2026-12688
6.5 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability
CVE-2026-57697
7.5 High
-
metagauss memberships and user profiles for woocommerce – profilegrid woocommerce integration
Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation
CVE-2026-11359
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-57759
8.8 High
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
CVE-2026-12073
9.8 Critical
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
CVE-2026-4610
6.4 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
CVE-2026-4609
7.1 High
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
CVE-2026-4607
4.3 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter
CVE-2026-4608
6.5 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25417
6.5 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
CVE-2026-2494
4.3 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
CVE-2026-2488
4.3 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification
CVE-2026-1271
5.3 Medium
-
metagauss profilegrid – user profiles, groups and communities
ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension
CVE-2025-13416
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-4957
7.1 High
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability
CVE-2025-49033
8.5 High
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.5.2 - SQL Injection vulnerability
CVE-2025-49876
8.5 High
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function
CVE-2025-6977
6.1 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability
CVE-2025-52719
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-49877
4.9 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.5.0 - SQL Injection Vulnerability
CVE-2025-47478
8.5 High
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability
CVE-2025-48079
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.4.8 - SQL Injection Vulnerability
CVE-2025-39586
8.5 High
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection
CVE-2025-0724
8.8 High
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management
CVE-2025-1408
4.3 Medium
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection
CVE-2025-0723
6.5 Medium
-
metagauss profilegrid
WordPress ProfileGrid Plugin <= 5.9.4.3 - PHP Object Injection vulnerability
CVE-2025-26999
8.8 High
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure
CVE-2024-13740
4.3 Medium
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
CVE-2024-13741
5.4 Medium
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
CVE-2024-10900
6.5 Medium
-
metagauss profilegrid
WordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerability
CVE-2024-37453
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.9.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-49273
4.3 Medium
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-8861
6.4 Medium
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
CVE-2024-6411
8.8 High
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
CVE-2024-6410
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.6.6 - Broken Access Control vulnerability
CVE-2023-52117
4.3 Medium
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid <= 5.8.6 - Missing Authorization
CVE-2024-5453
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.8.2 - Group Members Limit Bypass vulnerability
CVE-2024-32774
4.3 Medium
-
metagauss profilegrid, profilegrid – user profiles, groups and communities +1 more
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization
CVE-2024-3606
4.3 Medium
-
metagauss profilegrid, wordpress profile grid +1 more
WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object References (IDOR) vulnerability
CVE-2024-32772
4.3 Medium
-
metagauss profilegrid
WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object Reference (IDOR) vulnerability
CVE-2024-32808
5.4 Medium
- Show olderLoading…