WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profilegrid-user-profiles-groups-and-communities
Published
2022-10-27
Title
ProfileGrid < 5.0.4 - Subscriber+ Private Message Read/Edition
Slug
profilegrid-user-profiles-groups-and-communities
Published
2022-11-17
Title
ProfileGrid < 5.1.8 - Subscriber+ CSV Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2023-02-27
Title
ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset
Slug
profilegrid-user-profiles-groups-and-communities
Published
2023-07-17
Title
ProfileGrid < 5.5.3 - Group Owner+ Unauthorized Data Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2023-07-17
Title
ProfileGrid < 5.5.2 - Subscriber+ Arbitrary Option Update
Slug
profilegrid-user-profiles-groups-and-communities
Published
2023-07-17
Title
ProfileGrid < 5.5.2 - Subscriber+ Unauthorized Data Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2023-11-07
Title
ProfileGrid < 5.7.2 - Cross-Site Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2023-12-28
Title
ProfileGrid < 5.6.7 - Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-03-28
Title
ProfileGrid < 5.7.9 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-03-28
Title
ProfileGrid < 5.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-03-28
Title
ProfileGrid < 5.7.9 - Unauthenticated SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-04-05
Title
ProfileGrid < 5.7.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-04-08
Title
ProfileGrid < 5.7.9 - Cross-Site Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-04-16
Title
ProfileGrid – User Profiles, Memberships, Groups and Communities < 5.8.4 - Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-04-22
Title
ProfileGrid – User Profiles, Memberships, Groups and Communities < 5.8.0 - Insecure Direct Object Reference
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-04-22
Title
ProfileGrid – User Profiles, Memberships, Groups and Communities < 5.8.0 - Insecure Direct Object Reference
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-04-22
Title
ProfileGrid < 5.8.3 - Bypass Group Members Limit
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-04-26
Title
ProfileGrid < 5.7.2 - Authenticated (Contributor+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-06-04
Title
ProfileGrid < 5.8.7 - Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-07-01
Title
ProfileGrid < 5.8.8 - Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-07-09
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.0 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-07-09
Title
ProfileGrid < 5.9.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-09-25
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-10-14
Title
ProfileGrid < 5.9.3.1 - Cross-Site Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-11-19
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.3.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion