Unknown ProfileGrid

• CVE-2026-103693 Critical 9.0 Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection 0.5%
• CVE-2026-16290 Medium 5.3 ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group 0.4%
• CVE-2026-16289 Medium 4.3 ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group 0.3%
• CVE-2026-16291 Medium 4.3 ProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR 0.3%
• CVE-2026-12687 High 7.5 ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID 0.4%
• CVE-2026-12690 Low 3.8 ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization 0.3%
• CVE-2026-12689 Medium 5.4 ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization 0.2%
• CVE-2026-12688 Medium 6.5 ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery 0.3%
• CVE-2023-0940 High 8.8 ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset 0.8%