Known vulnerabilities in the Profilegrid plugin
52 security advisories have been published for the Profilegrid plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- ProfileGrid - Security Vulnerability (CVE-2026-16290) MEDIUM
- ProfileGrid - Security Vulnerability (CVE-2026-16289) MEDIUM
- ProfileGrid - Security Vulnerability (CVE-2026-16291) MEDIUM
- ProfileGrid - Privilege Escalation (CVE-2026-12687) HIGH
- ProfileGrid - Security Vulnerability (CVE-2026-12688) MEDIUM
- ProfileGrid - Security Vulnerability (CVE-2026-12689) MEDIUM
- ProfileGrid - Broken Access Control (CVE-2026-12690) LOW
- ProfileGrid - Cross-Site Request Forgery (CSRF) (CVE-2026-57759) HIGH
- ProfileGrid - Privilege Escalation (CVE-2026-12073) CRITICAL
- ProfileGrid - Cross-Site Scripting (XSS) (CVE-2026-4610) MEDIUM
- ProfileGrid - Broken Access Control (CVE-2026-4609) HIGH
- ProfileGrid - SQL Injection (CVE-2026-4608) MEDIUM
- ProfileGrid - Broken Access Control (CVE-2026-4607) MEDIUM
- ProfileGrid - Cross-Site Request Forgery (CSRF) (CVE-2026-2494) MEDIUM
- ProfileGrid - Broken Access Control (CVE-2026-2488) MEDIUM
- ProfileGrid - Security Vulnerability (CVE-2026-1271) MEDIUM
- ProfileGrid - Broken Access Control (CVE-2025-13416) MEDIUM
- Profilegrid - Cross-Site Scripting (XSS) (CVE-2025-6977) MEDIUM
- Profilegrid - PHP Object Injection (CVE-2025-0724) HIGH
- Profilegrid - Information Disclosure (CVE-2025-0723) MEDIUM
- Profilegrid - Broken Access Control (CVE-2025-1408) MEDIUM
- Profilegrid - Security Vulnerability (CVE-2024-13740) MEDIUM
- Profilegrid - Server-Side Request Forgery (SSRF) (CVE-2024-13741) MEDIUM
- Profilegrid - Broken Access Control (CVE-2024-10900) MEDIUM
- Profilegrid - Broken Access Control (CVE-2024-37453) MEDIUM
- Profilegrid - Broken Access Control (CVE-2024-49273) MEDIUM
- Profilegrid - Cross-Site Scripting (XSS) (CVE-2024-8861) MEDIUM
- Profilegrid - Privilege Escalation (CVE-2024-6411) HIGH
- Profilegrid - Security Vulnerability (CVE-2024-6410) MEDIUM
- Profilegrid - Broken Access Control (CVE-2023-52117) MEDIUM