<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: profilegrid</title><description>Every new CVE for profilegrid.</description><link>https://agentprime.io/</link><item><title>CVE-2026-103693: Frontend Dashboard &lt; 3.0.5 and ProfileGrid &lt; 6.0.0.5 - Unauthenticated PHP Object Injection</title><link>https://agentprime.io/advisories/CVE-2026-103693/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103693/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 06:00:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-16290: ProfileGrid &lt; 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group</title><link>https://agentprime.io/advisories/CVE-2026-16290/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16290/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 06:00:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16289: ProfileGrid &lt; 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group</title><link>https://agentprime.io/advisories/CVE-2026-16289/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16289/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Aug 2026 06:00:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16291: ProfileGrid &lt; 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR</title><link>https://agentprime.io/advisories/CVE-2026-16291/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16291/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 02 Aug 2026 06:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12687: ProfileGrid &lt; 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID</title><link>https://agentprime.io/advisories/CVE-2026-12687/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12687/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 06:00:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12690: ProfileGrid &lt; 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization</title><link>https://agentprime.io/advisories/CVE-2026-12690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12690/</guid><description>CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2026 06:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12689: ProfileGrid &lt; 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization</title><link>https://agentprime.io/advisories/CVE-2026-12689/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12689/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2026 06:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12688: ProfileGrid &lt; 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery</title><link>https://agentprime.io/advisories/CVE-2026-12688/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12688/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2026 06:00:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-37453: WordPress ProfileGrid – User Profiles, Groups and Communities plugin &lt;= 5.8.7 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-37453/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37453/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 01 Nov 2024 14:18:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-0940: ProfileGrid &lt; 5.3.1 - Subscriber+ Arbitrary Password Reset</title><link>https://agentprime.io/advisories/CVE-2023-0940/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0940/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Mar 2023 15:52:16 GMT</pubDate><category>CVE</category></item></channel></rss>