ProfileGrid – User Profiles, Groups and Communities < 5.9.9.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
ProfileGrid <= 5.0.0.0 - Missing Authorization
Medium
ProfileGrid <= 5.0.0.0 - Missing Authorization
Medium
ProfileGrid – User Profiles, Groups and Communities < 5.9.9.8 - Unauthenticated Group Registration Bypass
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.9.6 - Unauthenticated Privilege Escalation via Password Reset
Critical
ProfileGrid <= 5.9.9.6 - Missing Authorization
Medium
ProfileGrid <= 5.9.9.6 - Missing Authorization
Medium
ProfileGrid <= 5.9.9.6 - Unauthenticated Payment Bypass
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.9.8 - Cross-Site Request Forgery
Medium
ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
Critical
ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
Medium
ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter
Medium
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
Medium
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
High
ProfileGrid – User Profiles, Groups and Communities <= 5.9.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Medium
ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
Medium
ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.7 - Reflected Cross-Site Scripting
Medium
ProfileGrid <= 5.9.5.3 - Authenticated (Subscriber+) SQL Injection
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function
Medium
ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) SQL Injection
Medium
ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) Full Path Disclosure
Medium
ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
ProfileGrid <= 5.9.5.1 - Missing Authorization
Medium
ProfileGrid <= 5.9.5.0 - Authenticated (Subscriber+) SQL Injection
Medium
ProfileGrid <= 5.9.4.8 - Authenticated (Subscriber+) SQL Injection
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection
High
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection
Medium
ProfileGrid <= 5.9.4.3 - Authenticated (Subscriber+) PHP Object Injection
High
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
Medium
ProfileGrid <= 5.9.3 - Cross-Site Request Forgery
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
High
ProfileGrid <= 5.8.7 - Missing Authorization
Medium
ProfileGrid <= 5.8.6 - Missing Authorization
Medium
ProfileGrid <= 5.7.1 - Authenticated (Contributor+) SQL Injection
Medium
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference
Medium
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference
Medium
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization
Medium
ProfileGrid <= 5.7.8 - Cross-Site Request Forgery
Medium
ProfileGrid <= 5.7.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
ProfileGrid <= 5.7.8 - Unauthenticated SQL Injection
Critical
ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection
Critical
ProfileGrid <= 5.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
ProfileGrid <= 5.6.6 - Missing Authorization
Medium
ProfileGrid <= 5.7.1 - Cross-Site Request Forgery
Medium
ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update
High
ProfileGrid <= 5.5.0 - Hardcoded Encryption Key
Medium
ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation
High
ProfileGrid <= 5.5.1 - Missing Authorization to User Import
Medium
ProfileGrid <= 5.3.0 - Missing Authorization to Arbitrary Password Reset
High
ProfileGrid <= 5.1.7 - Authenticated (Subscriber+) CSV Injection
Medium
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.0.3 - Missing Authorization to Information Exposure
Medium
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.1.0 - Reflected Cross-Site Scripting
Medium
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 - Stored Cross-Site Scripting via Profile
Medium
ProfileGrid – User Profiles, Memberships, Groups and Communities < 2.8.6 - Remote Code Execution
High
