Metagauss vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 202447
3. 202526
4. 202637

Newest CVEs

• CVE-2026-94663

  WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability

  Metagauss · ProfileGrid

  High8.5
• CVE-2026-62061

  WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability

  Metagauss · ProfileGrid

  Medium5.3
• CVE-2026-82225

  WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

  Metagauss · RegistrationMagic

  High7.4
• CVE-2026-82221

  WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

  Metagauss · RegistrationMagic

  High7.1
• CVE-2026-73341

  WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability

  Metagauss · RegistrationMagic

  Critical9.8
• CVE-2026-57697

  WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability

  Metagauss · ProfileGrid

  High7.5
• CVE-2026-13441

  EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter

  metagauss · EventPrime – Events Calendar, Bookings and Tickets

  High7.2
• CVE-2026-11359

  Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation

  metagauss · Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration

  Medium4.3
• CVE-2026-57759

  WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability

  Metagauss · ProfileGrid

  High8.8
• CVE-2026-12158

  RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter

  metagauss · RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

  High8.8