Vulnerabilities > Metagauss > Profilegrid > 2.6.6

DATE CVE VULNERABILITY TITLE RISK
2024-04-24 CVE-2024-32808 Unspecified vulnerability in Metagauss Profilegrid
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.9.
network
low complexity
metagauss
8.8
2024-04-12 CVE-2024-31362 Unspecified vulnerability in Metagauss Profilegrid
Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.
network
low complexity
metagauss
8.8
2024-04-07 CVE-2024-31291 Unspecified vulnerability in Metagauss Profilegrid
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.6.
network
low complexity
metagauss
7.1
2024-03-29 CVE-2024-30513 Unspecified vulnerability in Metagauss Profilegrid
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2.
network
low complexity
metagauss
6.5
2024-03-29 CVE-2024-30490 Unspecified vulnerability in Metagauss Profilegrid
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.
network
low complexity
metagauss
critical
9.8
2024-03-29 CVE-2024-30491 Unspecified vulnerability in Metagauss Profilegrid
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.
network
low complexity
metagauss
8.8
2024-03-28 CVE-2024-30241 Unspecified vulnerability in Metagauss Profilegrid
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1.
network
low complexity
metagauss
8.8
2024-01-08 CVE-2022-36352 Unspecified vulnerability in Metagauss Profilegrid
Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3.
network
low complexity
metagauss
8.8
2023-11-18 CVE-2023-47644 Unspecified vulnerability in Metagauss Profilegrid
Cross-Site Request Forgery (CSRF) vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6.
network
low complexity
metagauss
8.8
2023-07-18 CVE-2023-3403 Unspecified vulnerability in Metagauss Profilegrid
The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pm_upload_csv' function in versions up to, and including, 5.5.1.
network
low complexity
metagauss
4.3