WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-05-12
Title
ProfileGrid < 5.9.8.5 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-05-12
Title
ProfileGrid < 5.9.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-06-22
Title
ProfileGrid < 5.9.9.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-06-29
Title
ProfileGrid < 5.9.9.6 - Unauthenticated Privilege Escalation via Email Overwrite
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-03
Title
ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-03
Title
ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-02
Title
ProfileGrid – User Profiles, Groups and Communities <= 5.9.9.8 - Cross-Site Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-03
Title
ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-10
Title
ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-08
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.9.7 - Unauthenticated Privilege Escalation via Password Reset
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-21
Title
ProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-24
Title
ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group
Slug
profilepress-pro
Published
2024-10-22
Title
ProfilePress - Pro < 4.11.2 - Authentication Bypass
Slug
profilepro
Published
2024-06-05
Title
profilepro <= 1.3 - Subscriber+ Stored Cross Site Scripting
Slug
profiler-what-slowing-down
Published
2025-06-06
Title
Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration
Slug
profiler-what-slowing-down
Published
2025-07-07
Title
Profiler - What Slowing Down Your WP <= 1.0.0 - Missing Authorization
Slug
profiles
Published
2014-08-01
Title
Profiles <= 2.0RC1 - SQL Injection
Slug
profit-products-tables-for-woocommerce
Published
2021-10-12
Title
WooCommerce Products Table < 1.0.4 - Reflected Cross-Site Scripting
Slug
profit-products-tables-for-woocommerce
Published
2022-06-01
Title
Active Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting
Slug
profit-products-tables-for-woocommerce
Published
2023-12-27
Title
Active Products Tables for WooCommerce < 1.0.6.1 - Unauthenticated PHP Object Injection
Slug
profit-products-tables-for-woocommerce
Published
2023-12-27
Title
Active Products Tables for WooCommerce < 1.0.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
profit-products-tables-for-woocommerce
Published
2024-01-31
Title
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store < 1.0.6.2 - Missing Authorization
Slug
profit-products-tables-for-woocommerce
Published
2024-01-31
Title
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store < 1.0.6.2 - Cross-Site Request Forgery
Slug
profit-products-tables-for-woocommerce
Published
2024-04-19
Title
Active Products Tables for WooCommerce < 1.0.6.3 - Missing Authorization
Slug
profit-products-tables-for-woocommerce
Published
2024-06-06
Title
Active Products Tables for WooCommerce. Use constructor to create tables < 1.0.6.4 - Reflected Cross-Site Scripting