ProfileGrid – User Profiles, Groups and Communities

Уязвимости

• CVE-2024-30490без авторизации≤ 5.7.8

  WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability

  Критич. 9.8

• CVE-2026-57759без авторизации · нужен клик≤ 6.0.0.2

  WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability

  Высокий 8.8

• CVE-2024-31362без авторизации · нужен клик≤ 5.7.8

  WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability

  Высокий 8.8

• CVE-2023-47644без авторизации · нужен клик≤ 5.6.6

  WordPress ProfileGrid Plugin <= 5.6.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2025-0724подписчик+≤ 5.9.4.5

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection

  Высокий 8.8

• CVE-2025-26999нужен вход≤ 5.9.4.3

  WordPress ProfileGrid Plugin <= 5.9.4.3 - PHP Object Injection vulnerability

  Высокий 8.8

• CVE-2024-37453нужен вход≤ 5.8.7

  WordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-6411подписчик+≤ 5.8.9

  ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation

  Высокий 8.8

• CVE-2024-32774нужен вход≤ 5.8.2

  WordPress ProfileGrid plugin <= 5.8.2 - Group Members Limit Bypass vulnerability

  Высокий 8.8

• CVE-2024-32808нужен вход≤ 5.7.9

  WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object Reference (IDOR) vulnerability

  Высокий 8.8

• CVE-2024-32772нужен вход≤ 5.7.9

  WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object References (IDOR) vulnerability

  Высокий 8.8

• CVE-2024-30491нужен вход≤ 5.7.8

  WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - SQL Injection vulnerability

  Высокий 8.8

• CVE-2022-36352нужен вход≤ 5.0.3

  WordPress ProfileGrid Plugin <= 5.0.3 is vulnerable to Broken Access Control

  Высокий 8.8

• CVE-2023-3714нужен вход≤ 5.5.2

  ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation

  Высокий 8.8

• CVE-2023-3713подписчик+≤ 5.5.1

  ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update

  Высокий 8.8

• CVE-2022-41791подписчик+≤ 5.1.6

  WordPress ProfileGrid plugin <= 5.1.6 - Auth. CSV Injection vulnerability

  Высокий 8.8

• CVE-2019-15873нужен вход

  The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.

  Высокий 8.8

• CVE-2024-30241участник+≤ 5.7.1

  WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability

  Высокий 8.8

• CVE-2025-49033нужен вход≤ 5.9.5.3

  WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2025-49876нужен вход≤ 5.9.5.2

  WordPress ProfileGrid plugin <= 5.9.5.2 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2025-47478нужен вход≤ 5.9.5.0

  WordPress ProfileGrid plugin <= 5.9.5.0 - SQL Injection Vulnerability

  Высокий 8.5

• CVE-2025-39586нужен вход≤ 5.9.4.8

  WordPress ProfileGrid plugin <= 5.9.4.8 - SQL Injection Vulnerability

  Высокий 8.5

• CVE-2024-10900подписчик+≤ 5.9.3.6

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion

  Высокий 8.1

• CVE-2026-57697без авторизации≤ 5.9.9.6

  WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability

  Высокий 7.5

• CVE-2025-4957без авторизации · нужен клик≤ 5.9.5.7

  WordPress ProfileGrid plugin <= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-4609подписчик+≤ 5.9.8.4

  ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining

  Высокий 7.1

• CVE-2024-31291нужен вход≤ 5.7.6

  WordPress ProfileGrid plugin <= 5.7.6 - IDOR on Friend Request vulnerability

  Высокий 7.1

• CVE-2024-49273без авторизации · нужен клик≤ 5.9.3

  WordPress ProfileGrid plugin <= 5.9.3 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 6.5

• CVE-2026-4608подписчик+≤ 5.9.8.4

  ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter

  Средний 6.5

• CVE-2026-25417нужен вход≤ 5.9.8.1

  WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2025-0723подписчик+≤ 5.9.4.7

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection

  Средний 6.5

• CVE-2024-30513нужен вход≤ 5.7.2

  WordPress ProfileGrid plugin <= 5.7.2 - Insecure Direct Object References (IDOR) vulnerability

  Средний 6.5

• CVE-2026-4610подписчик+≤ 5.9.9.2

  ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content

  Средний 6.4

• CVE-2023-52117нужен вход≤ 5.6.6

  WordPress ProfileGrid plugin <= 5.6.6 - Broken Access Control vulnerability

  Средний 6.3

• CVE-2025-6977без авторизации · нужен клик≤ 5.9.5.4

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function

  Средний 6.1

• CVE-2024-13741подписчик+≤ 5.9.4.2

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery

  Средний 5.4

• CVE-2022-0233нужен вход≤ 4.7.4

  ProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 Authenticated Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-8861участник+≤ 5.9.3.2

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2026-62061без авторизации≤ 6.0.0.2

  WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability

  Средний 5.3

• CVE-2026-1271подписчик+≤ 5.9.7.2

  ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification

  Средний 5.3

• CVE-2025-49877нужен вход≤ 5.9.5.2

  WordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) Vulnerability

  Средний 4.9

• CVE-2023-3404админ≤ 5.5.0

  ProfileGrid <= 5.5.0 - Hardcoded Encryption Key

  Средний 4.9

• CVE-2026-2494без авторизации · нужен клик≤ 5.9.8.2

  ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial

  Средний 4.3

• CVE-2026-4607подписчик+≤ 5.9.8.4

  ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification

  Средний 4.3

• CVE-2026-2488подписчик+≤ 5.9.8.1

  ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion

  Средний 4.3

• CVE-2025-13416подписчик+≤ 5.9.7.2

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension

  Средний 4.3

• CVE-2025-52719нужен вход≤ 5.9.5.2

  WordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability

  Средний 4.3

• CVE-2025-48079нужен вход≤ 5.9.5.1

  WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability

  Средний 4.3

• CVE-2025-1408подписчик+≤ 5.9.4.4

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management

  Средний 4.3

• CVE-2024-13740подписчик+≤ 5.9.4.2

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure

  Средний 4.3

• CVE-2024-6410подписчик+≤ 5.8.9

  ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference

  Средний 4.3

• CVE-2024-5453подписчик+≤ 5.8.6

  ProfileGrid <= 5.8.6 - Missing Authorization

  Средний 4.3

• CVE-2024-3606подписчик+≤ 5.8.3

  ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization

  Средний 4.3

• CVE-2023-3403подписчик+≤ 5.5.1

  ProfileGrid <= 5.5.1 - Missing Authorization to User Import

  Средний 4.3