| CVE-2026-103693 |
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an…
|
9.0
Critical
|
Oct 29, 2026 |
| CVE-2026-16290 |
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member…
|
5.3
Medium
|
Aug 6, 2026 |
| CVE-2026-16289 |
The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending…
|
4.3
Medium
|
Aug 3, 2026 |
| CVE-2026-16291 |
The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to the requesting user…
|
4.3
Medium
|
Aug 2, 2026 |
| CVE-2026-12687 |
The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into…
|
7.5
High
|
Jul 30, 2026 |
| CVE-2026-12688 |
The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before granting paid group…
|
6.5
Medium
|
Jul 24, 2026 |
| CVE-2026-12689 |
The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its…
|
5.4
Medium
|
Jul 24, 2026 |
| CVE-2026-12690 |
The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its license management…
|
3.8
Low
|
Jul 24, 2026 |
| CVE-2023-0940 |
The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not…
|
8.8
High
|
Mar 20, 2023 |