Skip to contentMetagauss Profilegrid – User Profiles, Groups And Communities vulnerabilities
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email OverwriteCVE-2026-120739.8 Critical
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message ContentCVE-2026-46106.4 Medium
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group JoiningCVE-2026-46097.1 High
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings ModificationCVE-2026-46074.3 Medium
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' ParameterCVE-2026-46086.5 Medium
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/DenialCVE-2026-24944.3 Medium
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message DeletionCVE-2026-24884.3 Medium
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image ModificationCVE-2026-12715.3 Medium
- metagauss profilegrid – user profiles, groups and communitiesProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User SuspensionCVE-2025-134164.3 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' functionCVE-2025-69776.1 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object InjectionCVE-2025-07248.8 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests ManagementCVE-2025-14084.3 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL InjectionCVE-2025-07236.5 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages DisclosureCVE-2024-137404.3 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request ForgeryCVE-2024-137415.4 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta DeletionCVE-2024-109006.5 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-88616.4 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege EscalationCVE-2024-64118.8 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2024-64104.3 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.8.6 - Missing AuthorizationCVE-2024-54534.3 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing AuthorizationCVE-2024-36064.3 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.0 - Hardcoded Encryption KeyCVE-2023-34044.9 Medium
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege EscalationCVE-2023-37147.5 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option UpdateCVE-2023-37138.8 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.1 - Missing Authorization to User ImportCVE-2023-34035.4 Medium