CVE-2026-12687

ProfileGrid WordPress plugin vulnerable before 5.9.9.8: anonymous front‑end registration may join any group, granting that group’s configured role (up to Administrator) to unauthenticated users. This is privilege escalation. Remediation: upgrade to 5.9.9.8 or later. No exploit details are provide...