CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

555 matches found

Patchstack•added 2026/02/04 10:50 p.m.•11 views

WordPress ProfileGrid - User Profiles, Groups and Communities plugin <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension vulnerability

WordPress ProfileGrid - User Profiles, Groups and Communities plugin = 5.9.7.2 - Missing Authorization to Authenticated Subscriber+ Arbitrary User Suspension vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin ProfileGrid versions = 5.9.7.2...

4.3CVSS5.4AI score0.00282EPSS

SaveExploits0References1Affected Software1

RedhatCVE•added 2026/01/09 9:12 a.m.•9 views

CVE-2022-0233

The ProfileGrid – User Profiles, Memberships, Groups and Communities WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the pmuseravatar and pmcoverimage parameters found in the /admin/class-profile-magic-admin.php file which allows attackers with...

6.4CVSS5.7AI score0.009EPSS

SaveExploits1References1

RedhatCVE•added 2026/01/07 9:17 a.m.•20 views

CVE-2025-1408

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...

4.3CVSS6.5AI score0.00276EPSS

SaveExploits0References1

Patchstack•added 2025/12/31 12:0 a.m.•9 views

WordPress ProfileGrid plugin <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management vulnerability

Missing Authorinzation to Authenticated Subscriber+ Join Group Requests Management vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ProfileGrid versions = 5.9.4.4...

4.3CVSS5.9AI score0.00276EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/12/31 12:0 a.m.•8 views

WordPress ProfileGrid plugin <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection vulnerability

Authenticated Subscriber+ PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ProfileGrid versions = 5.9.4.5...

8.8CVSS7.3AI score0.00561EPSS

SaveExploits0References1Affected Software1