WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-07-09
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.0 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-07-09
Title
ProfileGrid < 5.9.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-09-25
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-10-14
Title
ProfileGrid < 5.9.3.1 - Cross-Site Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2024-11-19
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.3.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-02-17
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.3 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-02-17
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-02-23
Title
ProfileGrid < 5.9.4.4 - Authenticated (Subscriber+) PHP Object Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-03-21
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.8 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-03-21
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.5 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-03-21
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.6 - Authenticated (Subscriber+) PHP Object Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-04-17
Title
ProfileGrid < 5.9.4.9 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-05-12
Title
ProfileGrid < 5.9.5.1 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-05-16
Title
ProfileGrid < 5.9.5.2 - Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-06-12
Title
ProfileGrid < 5.9.5.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-06-19
Title
ProfileGrid < 5.9.5.3 - Authenticated (Subscriber+) Full Path Disclosure
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-07-15
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.5.5 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-07-10
Title
ProfileGrid < 5.9.5.3 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-07-24
Title
ProfileGrid < 5.9.5.4 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-09-01
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.5.8 - Reflected Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-02-04
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.7.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-02-04
Title
ProfileGrid < 5.9.7.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-06
Title
ProfileGrid < 5.9.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-06
Title
ProfileGrid < 5.9.8.3 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-23
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.8.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting