WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-02-17
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.3 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-02-17
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-02-23
Title
ProfileGrid < 5.9.4.4 - Authenticated (Subscriber+) PHP Object Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-03-21
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.8 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-03-21
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.5 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-03-21
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.6 - Authenticated (Subscriber+) PHP Object Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-04-17
Title
ProfileGrid < 5.9.4.9 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-05-12
Title
ProfileGrid < 5.9.5.1 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-05-16
Title
ProfileGrid < 5.9.5.2 - Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-06-12
Title
ProfileGrid < 5.9.5.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-06-19
Title
ProfileGrid < 5.9.5.3 - Authenticated (Subscriber+) Full Path Disclosure
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-07-15
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.5.5 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-07-10
Title
ProfileGrid < 5.9.5.3 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-07-24
Title
ProfileGrid < 5.9.5.4 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-09-01
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.5.8 - Reflected Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-02-04
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.7.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-02-04
Title
ProfileGrid < 5.9.7.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-06
Title
ProfileGrid < 5.9.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-06
Title
ProfileGrid < 5.9.8.3 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-23
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.8.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
profilepress-pro
Published
2024-10-22
Title
ProfilePress - Pro < 4.11.2 - Authentication Bypass
Slug
profilepro
Published
2024-06-05
Title
profilepro <= 1.3 - Subscriber+ Stored Cross Site Scripting
Slug
profiler-what-slowing-down
Published
2025-06-06
Title
Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration
Slug
profiler-what-slowing-down
Published
2025-07-07
Title
Profiler - What Slowing Down Your WP <= 1.0.0 - Missing Authorization
Slug
profiles
Published
2014-08-01
Title
Profiles <= 2.0RC1 - SQL Injection