Unknown ProfileGrid
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-103693 | < 6.0.0.5 | Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection | CRITICAL 9.0 | 0.2 % | ||
| CVE-2026-16290 | < 6.0.0.0 | ProfileGrid < 6.0.0.0 - Unauthenticated Group Member List Disclosure via pm_get_all_users_from_group | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-16289 | < 6.0.0.0 | ProfileGrid < 6.0.0.0 - Subscriber+ Group Join Request Disclosure via pm_get_all_requests_from_group | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-16291 | < 5.9.9.8 | ProfileGrid < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion via IDOR | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-12687 | < 5.9.9.8 | ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID | HIGH 7.5 | 0.4 % | ||
| CVE-2026-12690 | < 5.9.9.7 | ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization | LOW 3.8 | 0.3 % | ||
| CVE-2026-12689 | < 5.9.9.7 | ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-12688 | < 5.9.9.7 | ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery | MEDIUM 6.5 | 0.3 % | ||
| CVE-2023-0940 | < 5.3.1 | ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset | HIGH 8.8 | 0.8 % |