5.5.2

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-18	CVE-2023-47644	Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Profilegrid Cross-Site Request Forgery (CSRF) vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6. network low complexity metagauss CWE-352	8.8
2023-07-18	CVE-2023-3714	Unspecified vulnerability in Metagauss Profilegrid The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'edit_group' handler in versions up to, and including, 5.5.2. network low complexity metagauss	8.8