WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-02-04
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.7.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-02-04
Title
ProfileGrid < 5.9.7.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-06
Title
ProfileGrid < 5.9.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-06
Title
ProfileGrid < 5.9.8.3 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-23
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.8.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-05-12
Title
ProfileGrid < 5.9.8.5 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-05-12
Title
ProfileGrid < 5.9.8.5 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-05-12
Title
ProfileGrid < 5.9.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
Slug
profilepress-pro
Published
2024-10-22
Title
ProfilePress - Pro < 4.11.2 - Authentication Bypass
Slug
profilepro
Published
2024-06-05
Title
profilepro <= 1.3 - Subscriber+ Stored Cross Site Scripting
Slug
profiler-what-slowing-down
Published
2025-06-06
Title
Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration
Slug
profiler-what-slowing-down
Published
2025-07-07
Title
Profiler - What Slowing Down Your WP <= 1.0.0 - Missing Authorization
Slug
profiles
Published
2014-08-01
Title
Profiles <= 2.0RC1 - SQL Injection
Slug
profit-products-tables-for-woocommerce
Published
2021-10-12
Title
WooCommerce Products Table < 1.0.4 - Reflected Cross-Site Scripting
Slug
profit-products-tables-for-woocommerce
Published
2022-06-01
Title
Active Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-Scripting
Slug
profit-products-tables-for-woocommerce
Published
2023-12-27
Title
Active Products Tables for WooCommerce < 1.0.6.1 - Unauthenticated PHP Object Injection
Slug
profit-products-tables-for-woocommerce
Published
2023-12-27
Title
Active Products Tables for WooCommerce < 1.0.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
profit-products-tables-for-woocommerce
Published
2024-01-31
Title
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store < 1.0.6.2 - Missing Authorization
Slug
profit-products-tables-for-woocommerce
Published
2024-01-31
Title
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store < 1.0.6.2 - Cross-Site Request Forgery
Slug
profit-products-tables-for-woocommerce
Published
2024-04-19
Title
Active Products Tables for WooCommerce < 1.0.6.3 - Missing Authorization
Slug
profit-products-tables-for-woocommerce
Published
2024-06-06
Title
Active Products Tables for WooCommerce. Use constructor to create tables < 1.0.6.4 - Reflected Cross-Site Scripting
Slug
profit-products-tables-for-woocommerce
Published
2024-11-05
Title
Active Products Tables for WooCommerce. Use constructor to create tables < 1.0.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode
Slug
profit-products-tables-for-woocommerce
Published
2024-12-09
Title
Active Products Tables for WooCommerce. Use constructor to create tables < 1.0.6.6 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth
Slug
profit-products-tables-for-woocommerce
Published
2025-02-17
Title
Active Products Tables for WooCommerce. Use constructor to create tables < 1.0.6.7 - Reflected Cross-Site Scripting
Slug
profit-products-tables-for-woocommerce
Published
2025-03-25
Title
Active Products Tables for WooCommerce < 1.0.6.8 - Unauthenticated Arbitrary Filter Call