Known vulnerabilities in metagauss ProfileGrid – User Profiles, Groups and Communities
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-12073 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via… | 9.8 Critical | Jun 30, 2026 |
| CVE-2026-4610 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Medium | Jun 23, 2026 |
| CVE-2026-4607 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to authorization bypass in… | 4.3 Medium | May 13, 2026 |
| CVE-2026-4609 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized access due to… | 7.1 High | May 13, 2026 |
| CVE-2026-4608 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via… | 6.5 Medium | May 13, 2026 |
| CVE-2026-2494 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Cross-Site Request Forgery… | 4.3 Medium | Mar 7, 2026 |
| CVE-2026-2488 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized message… | 4.3 Medium | Mar 7, 2026 |
| CVE-2026-1271 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object… | 5.3 Medium | Feb 5, 2026 |
| CVE-2025-13416 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized user… | 4.3 Medium | Feb 5, 2026 |
| CVE-2025-6977 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Reflected Cross-Site… | 6.1 Medium | Jul 16, 2025 |
| CVE-2025-0724 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in… | 8.8 High | Mar 22, 2025 |
| CVE-2025-1408 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized… | 4.3 Medium | Mar 22, 2025 |
| CVE-2025-0723 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL… | 6.5 Medium | Mar 22, 2025 |
| CVE-2024-13740 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object… | 4.3 Medium | Feb 18, 2025 |
| CVE-2024-13741 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side… | 5.4 Medium | Feb 18, 2025 |
| CVE-2024-10900 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized… | 6.5 Medium | Nov 20, 2024 |
| CVE-2024-8861 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Site… | 6.4 Medium | Sep 26, 2024 |
| CVE-2024-6411 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in… | 8.8 High | Jul 10, 2024 |
| CVE-2024-6410 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object… | 4.3 Medium | Jul 10, 2024 |
| CVE-2024-5453 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized… | 4.3 Medium | Jun 5, 2024 |
| CVE-2024-3606 | The ProfileGrid – User Profiles, Memberships, Groups and Communities plugin for WordPress is vulnerable to… | 4.3 Medium | May 2, 2024 |
| CVE-2023-3404 | The ProfileGrid plugin for WordPress is vulnerable to unauthorized decryption of private information in versions up… | 4.9 Medium | Aug 31, 2023 |
| CVE-2023-3714 | The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… | 7.5 High | Jul 18, 2023 |
| CVE-2023-3713 | The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… | 8.8 High | Jul 18, 2023 |
| CVE-2023-3403 | The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability… | 5.4 Medium | Jul 18, 2023 |
Other metagauss products
ProfileGrid 27
RegistrationMagic 21
EventPrime – Events Calendar, Bookings and Tickets 17
EventPrime 15
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login 15
ProfileGrid – User Profiles, Memberships, Groups and Communities 5
Download Plugin 3
Download Theme 1
Event Kikfyre 1
Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration 1
RegistrationMagic – User Registration Plugin with Custom Registration Forms 1