metagauss ProfileGrid – User Profiles, Groups and Communities.

ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Cross-site scripting (XSS)

ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter

• metagauss ProfileGrid – User Profiles, Groups and Communities
• SQL injection

ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Cross-site request forgery (CSRF)

ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Cross-site scripting (XSS)

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Insecure deserialization

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection

• metagauss ProfileGrid – User Profiles, Groups and Communities
• SQL injection

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Server-side request forgery (SSRF)

ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Cross-site scripting (XSS)

ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Privilege escalation

ProfileGrid <= 5.8.6 - Missing Authorization

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid <= 5.5.0 - Hardcoded Encryption Key

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Hard-coded credentials

ProfileGrid <= 5.5.1 - Missing Authorization to User Import

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control

ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update

• metagauss ProfileGrid – User Profiles, Groups and Communities
• Broken access control