CVE-2024-30241 WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1...

WordPress ProfileGrid Plugin <= 5.7.2 is vulnerable to Insecure Direct Object References (IDOR)

Software ProfileGrid Type Plugin Vulnerable versions = 5.7.2 Fixed in 5.7.3 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-30513 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6d5652387361 Credits Van Lyubov...

WordPress Plugin ProfileGrid SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

WordPress ProfileGrid Plugin <= 5.7.8 is vulnerable to SQL Injection

Software ProfileGrid Type Plugin Vulnerable versions = 5.7.8 Fixed in 5.7.9 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30490 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID a6e8b49df611 Credits LVT-tholv2k Required privilege Unauthenticated...

WordPress ProfileGrid Plugin <= 5.7.8 is vulnerable to SQL Injection

Software ProfileGrid Type Plugin Vulnerable versions = 5.7.8 Fixed in 5.7.9 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30491 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID c5d6607607c2 Credits LVT-tholv2k Required privilege Subscriber Published...

PT-2024-23288 · Metagauss · Metagauss Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.7.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

WordPress ProfileGrid Plugin <= 5.7.1 is vulnerable to SQL Injection

Software ProfileGrid Type Plugin Vulnerable versions = 5.7.1 Fixed in 5.7.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30241 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 73689cfe8f04 Credits Ngô Thiên An ancorn from VNPT-VCI Required privilege...

CVE-2022-36352

Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3...

CVE-2022-36352

Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3...

Authorization

Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3...

CVE-2022-36352 WordPress ProfileGrid Plugin <= 5.0.3 is vulnerable to Broken Access Control

Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3...

CVE-2022-36352

CVE-2022-36352 affects WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin. The issue is a Missing Authorization/Broken Access Control vulnerability in versions up to 5.0.3, allowing unauthorized access to certain actions/data. PatchStack specifies a fix in version 5...

CVE-2022-36352 WordPress ProfileGrid Plugin <= 5.0.3 is vulnerable to Broken Access Control

Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3...

PT-2024-11598 · Unknown · Profilegrid

Name of the Vulnerable Software and Affected Versions: ProfileGrid – User Profiles, Memberships, Groups and Communities versions through 5.0.3 Description: The issue is related to a Missing Authorization vulnerability. This means that certain actions or data may be accessible without the necessar...

WordPress Plugin ProfileGrid Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

ProfileGrid < 5.6.7 - Missing Authorization

Description The ProfileGrid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 5.6.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized action...

WordPress ProfileGrid Plugin <= 5.6.6 is vulnerable to Broken Access Control

Software ProfileGrid Type Plugin Vulnerable versions = 5.6.6 Fixed in 5.6.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-52117 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c7b51f634c0f Credits emad Required privilege Subscribe...

The vulnerability of the ProfileGrid plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the ProfileGrid plugin in the WordPress content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

ProfileGrid < 5.7.2 - Cross-Site Request Forgery

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2023-47644

Cross-Site Request Forgery CSRF vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6...