agentprime: metagauss-profilegrid-user-profiles-groups-and-communitiesEvery new CVE for metagauss-profilegrid-user-profiles-groups-and-communities.https://agentprime.io/CVE-2026-12073: ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwritehttps://agentprime.io/advisories/CVE-2026-12073/https://agentprime.io/advisories/CVE-2026-12073/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 05:34:05 GMTCVEcriticalCVE-2026-4610: ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Contenthttps://agentprime.io/advisories/CVE-2026-4610/https://agentprime.io/advisories/CVE-2026-4610/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 12:32:56 GMTCVECVE-2026-4609: ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joininghttps://agentprime.io/advisories/CVE-2026-4609/https://agentprime.io/advisories/CVE-2026-4609/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 13:27:54 GMTCVECVE-2026-4607: ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modificationhttps://agentprime.io/advisories/CVE-2026-4607/https://agentprime.io/advisories/CVE-2026-4607/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 13:27:54 GMTCVECVE-2026-4608: ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameterhttps://agentprime.io/advisories/CVE-2026-4608/https://agentprime.io/advisories/CVE-2026-4608/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 13:27:53 GMTCVECVE-2026-2494: ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denialhttps://agentprime.io/advisories/CVE-2026-2494/https://agentprime.io/advisories/CVE-2026-2494/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Mar 2026 01:21:22 GMTCVECVE-2026-2488: ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletionhttps://agentprime.io/advisories/CVE-2026-2488/https://agentprime.io/advisories/CVE-2026-2488/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Mar 2026 01:21:21 GMTCVECVE-2026-1271: ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modificationhttps://agentprime.io/advisories/CVE-2026-1271/https://agentprime.io/advisories/CVE-2026-1271/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Feb 2026 09:13:45 GMTCVECVE-2025-13416: ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspensionhttps://agentprime.io/advisories/CVE-2025-13416/https://agentprime.io/advisories/CVE-2025-13416/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Feb 2026 08:25:43 GMTCVECVE-2025-6977: ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' functionhttps://agentprime.io/advisories/CVE-2025-6977/https://agentprime.io/advisories/CVE-2025-6977/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Jul 2025 04:24:02 GMTCVECVE-2025-0724: ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injectionhttps://agentprime.io/advisories/CVE-2025-0724/https://agentprime.io/advisories/CVE-2025-0724/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 04:22:06 GMTCVECVE-2025-1408: ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Managementhttps://agentprime.io/advisories/CVE-2025-1408/https://agentprime.io/advisories/CVE-2025-1408/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 04:22:05 GMTCVECVE-2025-0723: ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injectionhttps://agentprime.io/advisories/CVE-2025-0723/https://agentprime.io/advisories/CVE-2025-0723/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 04:22:04 GMTCVECVE-2024-13740: ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosurehttps://agentprime.io/advisories/CVE-2024-13740/https://agentprime.io/advisories/CVE-2024-13740/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Feb 2025 02:06:01 GMTCVECVE-2024-13741: ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgeryhttps://agentprime.io/advisories/CVE-2024-13741/https://agentprime.io/advisories/CVE-2024-13741/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Feb 2025 01:44:00 GMTCVECVE-2024-10900: ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletionhttps://agentprime.io/advisories/CVE-2024-10900/https://agentprime.io/advisories/CVE-2024-10900/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Nov 2024 06:42:54 GMTCVECVE-2024-8861: ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-8861/https://agentprime.io/advisories/CVE-2024-8861/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Sep 2024 07:34:37 GMTCVECVE-2024-6410: ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Referencehttps://agentprime.io/advisories/CVE-2024-6410/https://agentprime.io/advisories/CVE-2024-6410/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jul 2024 04:31:30 GMTCVECVE-2024-6411: ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-6411/https://agentprime.io/advisories/CVE-2024-6411/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jul 2024 04:31:30 GMTCVECVE-2024-5453: ProfileGrid <= 5.8.6 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2024-5453/https://agentprime.io/advisories/CVE-2024-5453/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Jun 2024 07:34:55 GMTCVECVE-2024-3606: ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2024-3606/https://agentprime.io/advisories/CVE-2024-3606/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:33 GMTCVECVE-2023-3404: ProfileGrid <= 5.5.0 - Hardcoded Encryption Keyhttps://agentprime.io/advisories/CVE-2023-3404/https://agentprime.io/advisories/CVE-2023-3404/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 05:33:10 GMTCVECVE-2023-3403: ProfileGrid <= 5.5.1 - Missing Authorization to User Importhttps://agentprime.io/advisories/CVE-2023-3403/https://agentprime.io/advisories/CVE-2023-3403/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jul 2023 02:39:25 GMTCVECVE-2023-3714: ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-3714/https://agentprime.io/advisories/CVE-2023-3714/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jul 2023 02:39:25 GMTCVECVE-2023-3713: ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Updatehttps://agentprime.io/advisories/CVE-2023-3713/https://agentprime.io/advisories/CVE-2023-3713/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jul 2023 02:39:25 GMTCVE