| CVE-2026-103693 |
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an…
|
9.0
Critique
|
29 oct. 2026 |
| CVE-2026-16290 |
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member…
|
5.3
Moyenne
|
6 août 2026 |
| CVE-2026-16289 |
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending…
|
4.3
Moyenne
|
3 août 2026 |
| CVE-2026-16291 |
The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to the requesting user…
|
4.3
Moyenne
|
2 août 2026 |
| CVE-2026-12687 |
The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into…
|
7.5
Élevée
|
30 juil. 2026 |
| CVE-2026-12688 |
The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before granting paid group…
|
6.5
Moyenne
|
24 juil. 2026 |
| CVE-2026-12689 |
The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its…
|
5.4
Moyenne
|
24 juil. 2026 |
| CVE-2026-12690 |
The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its license management…
|
3.8
Faible
|
24 juil. 2026 |
| CVE-2023-0940 |
The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not…
|
8.8
Élevée
|
20 mars 2023 |