CVE-2023-23976 WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change

Incorrect Default Permissions vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects RegistrationMagic: from n/a through 5.1.9.2...

CVE-2023-23976

CVE-2023-23976 affects WordPress RegistrationMagic plugin versions

CVE-2024-32772 WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9...

CVE-2024-32772

CVE-2024-32772 is an Authorization Bypass through a user-controlled key vulnerability in the WordPress plugin ProfileGrid (ProfileGrid – User Profiles, Groups and Communities). The vulnerability affects versions up to and including 5.7.9 . The Red Hat entry confirms the issue title and affected p...

CVE-2024-32772 WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9...

CVE-2024-32808 WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object Reference (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9...

CVE-2024-32808

Technical details about CVE-2024-32808 (ProfileGrid Authorization Bypass) are not provided in the connected documents. Public specifics on affected versions, root cause, impact, or fixes are unavailable here; monitor for official advisories and vendor updates for confirmed remediation.

PT-2024-24882 · Unknown · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.9 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations: For versions through 5.7.9,...

CVE-2023-23989: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.1.9.2...

PT-2024-12014 · Metagauss · Registrationmagic

Name of the Vulnerable Software and Affected Versions: Metagauss RegistrationMagic versions 5.1.9.2 and earlier Description: The issue is related to incorrect default permissions, allowing access to functionality not properly constrained by Access Control Lists ACLs. This means that certain...

CVE-2024-32772: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9...

CVE-2024-32808: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9...

PT-2024-24844

Name of the Vulnerable Software and Affected Versions Metagauss ProfileGrid versions through 5.7.9 Description The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for potential unauthorized access. Recommendations For versions through 5.7.9, upda...

CVE-2023-23976: Incorrect Default Permissions

Incorrect Default Permissions vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects RegistrationMagic: from n/a through 5.1.9.2...

CVE-2024-31362

Cross-Site Request Forgery CSRF vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

CVE-2024-31362

Cross-Site Request Forgery CSRF vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

CVE-2024-31362 WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

CVE-2024-31362

CVE-2024-31362 is a CSRF vulnerability in ProfileGrid (Metagauss) affecting ProfileGrid versions up to 5.7.8. NVD CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no user privileges, and required user interaction. Public remediation details are not provided in the documents; PatchStack...

PT-2024-24007 · Metagauss · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.8 Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to perform unintended actions on a user's account. Recommendations: For versions...

CVE-2024-31362: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...