Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-16290

ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group

The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks before returning a group's member list, and registers the handler for unauthenticated users, allowing any unauthenticated visitor to disclose the members and their identifiers of any group, including private or closed ones, bypassing the ProfileGrid WordPress plugin before 6.0.0.0's member-visibility setting.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Profilegrid Wordpress
Products
Profilegrid Wordpress
CVE-2026-16291

ProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR

The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to the requesting user before deleting it, allowing any authenticated user such as a Subscriber to delete other users' notifications by enumerating notification identifiers.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Profilegrid Wordpress
Products
Profilegrid Wordpress
CVE-2026-16289

ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group

The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authenticated user such as a Subscriber to disclose the names and request dates of the users awaiting approval to join any group, including private ones.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Profilegrid Wordpress
Products
Profilegrid Wordpress
CVE-2026-12687

ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID

The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into through its front-end registration, allowing unauthenticated users to register directly into a privileged group and be granted that group's configured role, up to Administrator when such a group exists, leading to privilege escalation.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Profilegrid Wordpress
Products
Profilegrid Wordpress
CVE-2026-12690

ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization

The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its license management actions, relying only on a nonce that is exposed to any logged-in user, allowing authenticated users with Subscriber-level access and above to overwrite the site's premium license settings.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Profilegrid Wordpress
Products
Profilegrid Wordpress
CVE-2026-12689

ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization

The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users with Subscriber-level access and above to soft-delete, tamper with the metadata of, and mark as read other users' private message threads.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Profilegrid Wordpress
Products
Profilegrid Wordpress
CVE-2026-12688

ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery

The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before granting paid group membership, allowing unauthenticated attackers to forge a payment notification and mark any user as a paid member of any group without any payment being made.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Profilegrid Wordpress
Products
Profilegrid Wordpress