WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-07-24
Title
ProfileGrid < 5.9.5.4 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2025-09-01
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.5.8 - Reflected Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-02-04
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.7.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-02-04
Title
ProfileGrid < 5.9.7.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-06
Title
ProfileGrid < 5.9.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-06
Title
ProfileGrid < 5.9.8.3 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-03-23
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.8.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-05-12
Title
ProfileGrid < 5.9.8.5 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-05-12
Title
ProfileGrid < 5.9.8.5 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-05-12
Title
ProfileGrid < 5.9.8.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-06-22
Title
ProfileGrid < 5.9.9.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-06-29
Title
ProfileGrid < 5.9.9.6 - Unauthenticated Privilege Escalation via Email Overwrite
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-03
Title
ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-03
Title
ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-02
Title
ProfileGrid – User Profiles, Groups and Communities < 6.0.0.3 - Cross-Site Request Forgery
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-03
Title
ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-10
Title
ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-08
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.9.7 - Unauthenticated Privilege Escalation via Password Reset
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-21
Title
ProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-24
Title
ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-07-30
Title
ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-10-01
Title
ProfileGrid – User Profiles, Groups and Communities < 6.0.0.3 - Unauthenticated Insecure Direct Object Reference
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-10-04
Title
ProfileGrid – User Profiles, Groups and Communities < 6.0.0.3 - Authenticated (Subscriber+) SQL Injection
Slug
profilegrid-user-profiles-groups-and-communities
Published
2026-10-27
Title
Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
Slug
profilepress-pro
Published
2024-10-22
Title
ProfilePress - Pro < 4.11.2 - Authentication Bypass