PT-2025-12465

Name of the Vulnerable Software and Affected Versions The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.4 Description The issue is related to unauthorized modification of data due to a missing capability check on the pm decline join...

PT-2025-12463

Name of the Vulnerable Software and Affected Versions The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.7 Description The issue is related to blind and time-based SQL Injections via the rid and search parameters due to insufficient...

PT-2024-16633

Name of the Vulnerable Software and Affected Versions The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.3.6 Description The issue is related to a missing capability check on the pm remove file attachment function, allowing authenticate...

PT-2024-36383

Name of the Vulnerable Software and Affected Versions: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.8.6 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify data without proper...