Vulnerabilities > Metagauss > Profilegrid > 5.1.9

DATE CVE VULNERABILITY TITLE RISK
2023-03-20 CVE-2023-0940 Incorrect Authorization vulnerability in Metagauss Profilegrid
The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization.
network
low complexity
metagauss CWE-863
8.8