Vulnerabilities / ProfileGrid – User Profiles, Groups and Communities
ProfileGrid – User Profiles, Groups and Communities vulnerabilities
Advisories WPSec published for ProfileGrid – User Profiles, Groups and Communities. Other sources may list more. Its attack surface: ProfileGrid – User Profiles, Groups and Communities on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-22 | WPSEC-2026-1446 | ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.4 - Authenticated (Subscriber+) PHP Object Injection via Profile Field Values | High 7.5 | 6.0.0.5 |
| 2026-10-01 | WPSEC-2026-0060 | ProfileGrid <= 6.0.0.2 - Authenticated (Subscriber+) SQL Injection via Group IDs | Medium 4.3 | 6.0.0.3 |
| 2026-10-01 | WPSEC-2026-0059 | ProfileGrid <= 6.0.0.2 - Cross-Site Request Forgery to Group Joining | Medium 4.3 | 6.0.0.3 |
| 2026-10-01 | WPSEC-2026-0058 | ProfileGrid <= 6.0.0.2 - Authenticated (Subscriber+) Missing Authorization to Forced Friendship via Friend Request Acceptance | Medium 5.4 | 6.0.0.3 |
| 2026-10-01 | WPSEC-2026-0057 | ProfileGrid <= 6.0.0.2 - Cross-Site Request Forgery to Account Takeover via Profile Edit Form | High 8.8 | 6.0.0.3 |
| 2026-10-01 | WPSEC-2026-0056 | ProfileGrid <= 6.0.0.2 - Unauthenticated Sensitive Information Exposure via Blog Post Listing AJAX Actions | Medium 5.3 | 6.0.0.3 |
License: CC BY 4.0