Known vulnerabilities in the Groups And Communities plugin
22 security advisories have been published for the Groups And Communities plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Groups And Communities - Privilege Escalation (CVE-2026-12073) CRITICAL
- Groups And Communities - Cross-Site Scripting (XSS) (CVE-2026-4610) MEDIUM
- Groups And Communities - Broken Access Control (CVE-2026-4609) HIGH
- Groups And Communities - SQL Injection (CVE-2026-4608) MEDIUM
- Groups And Communities - Broken Access Control (CVE-2026-4607) MEDIUM
- Groups And Communities - Cross-Site Request Forgery (CSRF) (CVE-2026-2494) MEDIUM
- Groups And Communities - Broken Access Control (CVE-2026-2488) MEDIUM
- Groups And Communities - Security Vulnerability (CVE-2026-1271) MEDIUM
- Groups And Communities - Broken Access Control (CVE-2025-13416) MEDIUM
- Groups And Communities - Cross-Site Scripting (XSS) (CVE-2025-6977) MEDIUM
- Groups And Communities - PHP Object Injection (CVE-2025-0724) HIGH
- Groups And Communities - Information Disclosure (CVE-2025-0723) MEDIUM
- Groups And Communities - Broken Access Control (CVE-2025-1408) MEDIUM
- Groups And Communities - Security Vulnerability (CVE-2024-13740) MEDIUM
- Groups And Communities - Server-Side Request Forgery (SSRF) (CVE-2024-13741) MEDIUM
- Groups And Communities - Broken Access Control (CVE-2024-10900) MEDIUM
- Groups And Communities - Cross-Site Scripting (XSS) (CVE-2024-8861) MEDIUM
- Groups And Communities - Privilege Escalation (CVE-2024-6411) HIGH
- Groups And Communities - Security Vulnerability (CVE-2024-6410) MEDIUM
- Groups And Communities - Broken Access Control (CVE-2024-5453) MEDIUM
- Groups And Communities - Broken Access Control (CVE-2024-3606) MEDIUM
- Groups And Communities - Cross-Site Scripting (XSS) (CVE-2022-0233) MEDIUM