Vulnerabilities > Metagauss > Profilegrid
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-04-07 | CVE-2024-31291 | Unspecified vulnerability in Metagauss Profilegrid Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.6. | 7.1 |
| 2024-03-29 | CVE-2024-30513 | Unspecified vulnerability in Metagauss Profilegrid Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.2. | 6.5 |
| 2024-03-29 | CVE-2024-30490 | Unspecified vulnerability in Metagauss Profilegrid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8. | 9.8 |
| 2024-03-29 | CVE-2024-30491 | Unspecified vulnerability in Metagauss Profilegrid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8. | 8.8 |
| 2024-03-28 | CVE-2024-30241 | Unspecified vulnerability in Metagauss Profilegrid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.1. | 8.8 |
| 2024-01-08 | CVE-2022-36352 | Unspecified vulnerability in Metagauss Profilegrid Missing Authorization vulnerability in Profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.0.3. | 8.8 |
| 2023-11-18 | CVE-2023-47644 | Unspecified vulnerability in Metagauss Profilegrid Cross-Site Request Forgery (CSRF) vulnerability in profilegrid ProfileGrid – User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid – User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6. | 8.8 |
| 2023-07-18 | CVE-2023-3403 | Unspecified vulnerability in Metagauss Profilegrid The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pm_upload_csv' function in versions up to, and including, 5.5.1. | 4.3 |
| 2023-07-18 | CVE-2023-3714 | Unspecified vulnerability in Metagauss Profilegrid The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'edit_group' handler in versions up to, and including, 5.5.2. | 8.8 |
| 2023-03-20 | CVE-2023-0940 | Incorrect Authorization vulnerability in Metagauss Profilegrid The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. | 8.8 |