Every CVE whose affected-product data names Metagauss Profilegrid, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (35)
CVE-2024-30490 — CVSS 9.3 (critical): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue…
CVE-2023-3713 — CVSS 8.8 (high): The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2025-0724 — CVSS 8.8 (high): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in all versions up to…
CVE-2024-6411 — CVSS 8.8 (high): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in all versions up to…
CVE-2019-15873 — CVSS 8.8 (high): The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an…
CVE-2023-0940 — CVSS 8.8 (high): The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper…
CVE-2024-30491 — CVSS 8.5 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue…
CVE-2024-30241 — CVSS 8.5 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue…
CVE-2023-3714 — CVSS 7.5 (high): The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2025-0723 — CVSS 6.5 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the…
CVE-2024-10900 — CVSS 6.5 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a…
CVE-2024-30513 — CVSS 6.5 (medium): Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through…
CVE-2024-8861 — CVSS 6.4 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions…
CVE-2022-0233 — CVSS 6.4 (medium): The ProfileGrid – User Profiles, Memberships, Groups and Communities WordPress plugin is vulnerable to Stored Cross-Site Scripting due to…
CVE-2022-36352 — CVSS 6.3 (medium): Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects…
CVE-2022-3578 — CVSS 6.1 (medium): The ProfileGrid WordPress plugin before 5.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
CVE-2025-6977 — CVSS 6.1 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
CVE-2024-13741 — CVSS 5.4 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all…
CVE-2023-3403 — CVSS 5.4 (medium): The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2023-47644 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This…
CVE-2024-32808 — CVSS 5.4 (medium): Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through…
CVE-2023-3404 — CVSS 4.9 (medium): The ProfileGrid plugin for WordPress is vulnerable to unauthorized decryption of private information in versions up to, and including…
CVE-2024-32774 — CVSS 4.3 (medium): Improper Restriction of Excessive Authentication Attempts vulnerability in Metagauss ProfileGrid allows Removing Important Client…
CVE-2024-3606 — CVSS 4.3 (medium): The ProfileGrid – User Profiles, Memberships, Groups and Communities plugin for WordPress is vulnerable to unauthorized deletion of data…
CVE-2024-37453 — CVSS 4.3 (medium): Missing Authorization vulnerability in ProfileGrid User Profiles ProfileGrid allows Exploiting Incorrectly Configured Access Control…
CVE-2024-5453 — CVSS 4.3 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a…
CVE-2024-6410 — CVSS 4.3 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all…
CVE-2024-32772 — CVSS 4.3 (medium): Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through…
CVE-2024-31362 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.
CVE-2024-31291 — CVSS 4.3 (medium): Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through…
CVE-2024-13740 — CVSS 4.3 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all…
CVE-2025-1408 — CVSS 4.3 (medium): The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a…
CVE-2023-52117 — CVSS 4.3 (medium): Missing Authorization vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid: from n/a through 5.6.6.