Plugin icon

Groups – Memberships and Access Control

groups

Vulnerabilities:

4

Last Updated:

September 24, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-26
Title
Groups < 4.7.0 - Authenticated (Subscriber+) Privilege Escalation via 'groups_join' Shortcode
Fixed in
Fixed in 4.7.0
CVSS
8.8 (high)
Published
2026-02-18
Title
Groups < 3.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'groups_group_info' Shortcode
Fixed in
Fixed in 3.11.0
CVSS
6.4 (medium)
Published
2025-11-07
Title
Groups < 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Group Join
Fixed in
Fixed in 3.8.0
CVSS
4.3 (medium)
Published
2014-08-01
Title
Groups 1.4.5 - Negated Role Capability H&ling Elevated Privilege Issue
Fixed in
Fixed in 1.4.6
CVSS
n/a