Metagauss ProfileGrid vulnerabilities
25 published CVEs name Metagauss ProfileGrid among the affected products.
- Published CVEs
- 25
- Last 12 months
- 5
- Critical
- 1
- Known exploited
- 0
Critical 1High 11Medium 13Low 0Not scored 0
CVEs per yearBy the year they were published
- 202411
- 20259
- 20265
Newest CVEs
- CVE-2026-94663
WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability
Metagauss · ProfileGrid
High8.5 - CVE-2026-62061
WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
Metagauss · ProfileGrid
Medium5.3 - CVE-2026-57697
WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability
Metagauss · ProfileGrid
High7.5 - CVE-2026-57759
WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability
Metagauss · ProfileGrid
High8.8 - CVE-2026-25417
WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability
Metagauss · ProfileGrid
Medium6.5 - CVE-2025-4957
WordPress ProfileGrid plugin <= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerability
Metagauss · ProfileGrid
High7.1 - CVE-2025-49033
WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability
Metagauss · ProfileGrid
High8.5 - CVE-2025-49876
WordPress ProfileGrid plugin <= 5.9.5.2 - SQL Injection vulnerability
Metagauss · ProfileGrid
High8.5 - CVE-2025-52719
WordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability
Metagauss · ProfileGrid
Medium4.3 - CVE-2025-49877
WordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) Vulnerability
Metagauss · ProfileGrid
Medium4.9
Most common weaknesses
- CWE-89 SQL injection8
- CWE-639 Authorization bypass through a user-controlled key (IDOR)5
- CWE-862 Missing authorization3
- CWE-352 Cross-site request forgery (CSRF)2
- CWE-79 Cross-site scripting (XSS)2
- CWE-288 1
- CWE-307 Excessive authentication attempts1
- CWE-497 1
- CWE-502 Deserialization of untrusted data1
- CWE-918 Server-side request forgery (SSRF)1