Metagauss ProfileGrid – User Profiles, Groups and Communities

• CVE-2026-12073 Critical 9.8 ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite 0.5%
• CVE-2026-4610 Medium 6.4 ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content 0.3%
• CVE-2026-4609 High 7.1 ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining 0.2%
• CVE-2026-4607 Medium 4.3 ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification 0.2%
• CVE-2026-4608 Medium 6.5 ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter 0.3%
• CVE-2026-2494 Medium 4.3 ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial 0.2%
• CVE-2026-2488 Medium 4.3 ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion 0.2%
• CVE-2026-1271 Medium 5.3 ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification 0.4%
• CVE-2025-13416 Medium 4.3 ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension 0.3%
• CVE-2025-6977 Medium 6.1 ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function 0.3%
• CVE-2025-0724 High 8.8 ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection 0.6%
• CVE-2025-1408 Medium 4.3 ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management 0.3%
• CVE-2025-0723 Medium 6.5 ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection 0.4%
• CVE-2024-13740 Medium 4.3 ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure 0.3%
• CVE-2024-13741 Medium 5.4 ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery 0.4%
• CVE-2024-10900 Medium 6.5 ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion 0.5%
• CVE-2024-8861 Medium 6.4 ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-6410 Medium 4.3 ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference 0.4%
• CVE-2024-6411 High 8.8 ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation 0.8%
• CVE-2024-5453 Medium 4.3 ProfileGrid <= 5.8.6 - Missing Authorization 0.4%
• CVE-2024-3606 Medium 4.3 ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization 0.4%
• CVE-2023-3404 Medium 4.9 ProfileGrid <= 5.5.0 - Hardcoded Encryption Key 0.7%
• CVE-2023-3403 Medium 5.4 ProfileGrid <= 5.5.1 - Missing Authorization to User Import 0.6%
• CVE-2023-3714 High 7.5 ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation 0.9%
• CVE-2023-3713 High 8.8 ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update 0.8%