Vulnerabilities > Metagauss

DATE CVE VULNERABILITY TITLE RISK
2024-06-05 CVE-2024-5453 Missing Authorization vulnerability in Metagauss Profilegrid
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pm_dismissible_notice and pm_wizard_update_group_icon functions in all versions up to, and including, 5.8.6.
network
low complexity
metagauss CWE-862
4.3
2024-06-04 CVE-2023-51543 Authentication Bypass by Spoofing vulnerability in Metagauss Registrationmagic
Authentication Bypass by Spoofing vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects RegistrationMagic: from n/a through 5.2.5.0.
network
low complexity
metagauss CWE-290
7.5
2024-06-04 CVE-2023-51544 Unspecified vulnerability in Metagauss Registrationmagic
Improper Control of Interaction Frequency vulnerability in Metagauss RegistrationMagic allows Functionality Misuse.This issue affects RegistrationMagic: from n/a through 5.2.5.0.
network
low complexity
metagauss
5.3
2024-05-17 CVE-2024-32774 Unspecified vulnerability in Metagauss Profilegrid
Improper Restriction of Excessive Authentication Attempts vulnerability in Metagauss ProfileGrid allows Removing Important Client Functionality.This issue affects ProfileGrid : from n/a through 5.8.2.
network
low complexity
metagauss
8.8
2024-05-17 CVE-2023-33321 Unspecified vulnerability in Metagauss Eventprime
Missing Authorization vulnerability in Metagauss EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 2.8.6.
network
low complexity
metagauss
5.3
2024-05-03 CVE-2024-33947 Unspecified vulnerability in Metagauss Registrationmagic
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic allows Reflected XSS.This issue affects RegistrationMagic: from n/a through 5.3.2.0.
network
low complexity
metagauss
6.1
2024-04-24 CVE-2023-23989 Unspecified vulnerability in Metagauss Registrationmagic
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.1.9.2.
network
low complexity
metagauss
6.5
2024-04-24 CVE-2023-23976 Unspecified vulnerability in Metagauss Registrationmagic
Incorrect Default Permissions vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects RegistrationMagic: from n/a through 5.1.9.2.
network
low complexity
metagauss
7.5
2024-04-24 CVE-2024-32772 Unspecified vulnerability in Metagauss Profilegrid
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9.
network
low complexity
metagauss
8.8
2024-04-24 CVE-2024-32808 Unspecified vulnerability in Metagauss Profilegrid
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9.
network
low complexity
metagauss
8.8