ProfileGrid
Metagauss · 35 CVEs
WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
Oct 1, 2026
WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability
Jul 13, 2026
WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability
Jul 2, 2026
WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability
Mar 25, 2026
WordPress ProfileGrid plugin <= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerability
Sep 26, 2025
WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability
Aug 14, 2025
WordPress ProfileGrid plugin <= 5.9.5.2 - SQL Injection vulnerability
Jul 16, 2025
ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_n…
Jul 16, 2025
WordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability
Jun 20, 2025
WordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) Vulnerability
Jun 17, 2025
WordPress ProfileGrid plugin <= 5.9.5.0 - SQL Injection Vulnerability
May 23, 2025
WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability
May 16, 2025
WordPress ProfileGrid plugin <= 5.9.4.8 - SQL Injection Vulnerability
Apr 17, 2025
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection
Mar 22, 2025
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+)…
Mar 22, 2025
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection
Mar 22, 2025
WordPress ProfileGrid Plugin <= 5.9.4.3 - PHP Object Injection vulnerability
Mar 3, 2025
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Sub…
Feb 18, 2025
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Reques…
Feb 18, 2025
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) A…
Nov 20, 2024
WordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerability
Nov 1, 2024
WordPress ProfileGrid plugin <= 5.9.3 - Cross Site Request Forgery (CSRF) vulnerability
Oct 21, 2024
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripti…
Sep 26, 2024
ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Jul 10, 2024
ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Priv…
Jul 10, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-62061 | WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability | MEDIUM | 0.20% | Oct 1, 2026 |
| CVE-2026-57697 | WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability | HIGH | 0.48% | Jul 13, 2026 |
| CVE-2026-57759 | WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability | HIGH | 0.20% | Jul 2, 2026 |
| CVE-2026-25417 | WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.16% | Mar 25, 2026 |
| CVE-2025-4957 | WordPress ProfileGrid plugin <= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.24% | Sep 26, 2025 |
| CVE-2025-49033 | WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability | HIGH | 0.27% | Aug 14, 2025 |
| CVE-2025-49876 | WordPress ProfileGrid plugin <= 5.9.5.2 - SQL Injection vulnerability | HIGH | 0.34% | Jul 16, 2025 |
| CVE-2025-6977 | ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function | MEDIUM | 0.29% | Jul 16, 2025 |
| CVE-2025-52719 | WordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability | MEDIUM | 0.25% | Jun 20, 2025 |
| CVE-2025-49877 | WordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) Vulnerability | MEDIUM | 0.17% | Jun 17, 2025 |
| CVE-2025-47478 | WordPress ProfileGrid plugin <= 5.9.5.0 - SQL Injection Vulnerability | HIGH | 0.40% | May 23, 2025 |
| CVE-2025-48079 | WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability | MEDIUM | 0.23% | May 16, 2025 |
| CVE-2025-39586 | WordPress ProfileGrid plugin <= 5.9.4.8 - SQL Injection Vulnerability | HIGH | 0.34% | Apr 17, 2025 |
| CVE-2025-0724 | ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection | HIGH | 0.63% | Mar 22, 2025 |
| CVE-2025-1408 | ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management | MEDIUM | 0.29% | Mar 22, 2025 |
| CVE-2025-0723 | ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection | MEDIUM | 0.38% | Mar 22, 2025 |
| CVE-2025-26999 | WordPress ProfileGrid Plugin <= 5.9.4.3 - PHP Object Injection vulnerability | HIGH | 0.70% | Mar 3, 2025 |
| CVE-2024-13740 | ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure | MEDIUM | 0.29% | Feb 18, 2025 |
| CVE-2024-13741 | ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery | MEDIUM | 0.36% | Feb 18, 2025 |
| CVE-2024-10900 | ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion | HIGH | 0.48% | Nov 20, 2024 |
| CVE-2024-37453 | WordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerability | HIGH | 0.40% | Nov 1, 2024 |
| CVE-2024-49273 | WordPress ProfileGrid plugin <= 5.9.3 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.32% | Oct 21, 2024 |
| CVE-2024-8861 | ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 0.35% | Sep 26, 2024 |
| CVE-2024-6410 | ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference | MEDIUM | 0.35% | Jul 10, 2024 |
| CVE-2024-6411 | ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation | HIGH | 0.77% | Jul 10, 2024 |
Showing 1 to 25 of 35 CVEs