Vulnerabilities in metagauss

118 results
CVE-2025-48079MEDIUMWordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-4957HIGHWordPress ProfileGrid plugin <= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-12498MEDIUMEventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note CreationEPSS 0.2%CVE-2026-4607MEDIUMProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings ModificationEPSS 0.2%CVE-2025-63006MEDIUMWordPress EventPrime plugin <= 4.2.4.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-31362MEDIUMWordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-4609HIGHProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group JoiningEPSS 0.2%CVE-2024-2951MEDIUMWordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-24380MEDIUMWordPress EventPrime plugin <= 4.2.8.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-25312HIGHWordPress EventPrime plugin <= 4.2.8.3 - Payment Bypass vulnerabilityEPSS 0.2%CVE-2026-94663HIGHWordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-57759HIGHWordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-62061MEDIUMWordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-13610MEDIUMRegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' ShortcodeEPSS 0.2%CVE-2025-49877MEDIUMWordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) VulnerabilityEPSS 0.2%CVE-2026-25417MEDIUMWordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-2494MEDIUMProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/DenialEPSS 0.2%CVE-2026-24374MEDIUMWordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%