metagauss ProfileGrid – User Profiles, Groups and Communities vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 20246
3. 20256
4. 20269

Newest CVEs

• CVE-2026-12073

  ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Critical9.8
• CVE-2026-4610

  ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Medium6.4
• CVE-2026-4609

  ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  High7.1
• CVE-2026-4607

  ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Medium4.3
• CVE-2026-4608

  ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Medium6.5
• CVE-2026-2494

  ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Medium4.3
• CVE-2026-2488

  ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Medium4.3
• CVE-2026-1271

  ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Medium5.3
• CVE-2025-13416

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Medium4.3
• CVE-2025-6977

  ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function

  metagauss · ProfileGrid – User Profiles, Groups and Communities

  Medium6.1