Known vulnerabilities in ProfileGrid – User Profiles, Groups and Communities
Custom user profiles plugin ❤ with paid memberships, groups, communities, content restriction, user registration, messaging, WooCommerce memberships, …
60Reported vulnerabilities
10Highest CVSS score
6.0.0.1Latest version
5,000+Active installs
What to do now
Update ProfileGrid – User Profiles, Groups and Communities to 5.9.9.8 or later.
59 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2024-30491 | Critical | 32.0% | 5.7.8 and earlier | 5.7.9 |
March 28, 2024 |
| CVE-2019-15873 | High | 3.9% | Before 2.8.6 | 2.8.6 |
September 3, 2019 |
| CVE-2024-30490 | Critical | 2.2% | 5.7.8 and earlier | 5.7.9 |
March 28, 2024 |
| CVE-2026-57697 | Critical | 0.5% | 5.9.9.6 and earlier | 5.9.9.7 |
July 8, 2026 |
| CVE-2026-12073 | Critical | 0.5% | 5.9.9.5 and earlier | 5.9.9.6 |
June 29, 2026 |
| CVE-2022-0233 | Medium | 0.9% | 4.7.4 and earlier | 4.7.7 |
January 18, 2022 |
| CVE-2024-6411 | High | 0.8% | Before 5.9.0 | 5.9.0 |
July 10, 2024 |
| CVE-2023-3714 | High | 0.9% | Before 5.5.3 | 5.5.3 |
July 18, 2023 |
| CVE-2023-3713 | High | 0.8% | 5.5.1 and earlier | 5.5.2 |
July 18, 2023 |
| CVE-2025-0724 | High | 0.6% | Before 5.9.4.6 | 5.9.4.6 |
March 22, 2025 |
| CVE-2025-26999 | High | 0.7% | 5.9.4.3 and earlier | 5.9.4.4 |
February 23, 2025 |
| CVE-2022-41791 | High | 0.7% | 5.1.6 and earlier | 5.1.8 |
November 17, 2022 |
| CVE-2024-10900 | High | 0.5% | Before 5.9.3.7 | 5.9.3.7 |
November 20, 2024 |
| CVE-2026-4609 | High | 0.2% | 0 to 5.9.8.4 (inclusive) | 5.9.8.5 |
May 13, 2026 |
| CVE-2024-30241 | Medium | 0.9% | 5.7.1 and earlier | 5.7.2 |
April 26, 2024 |
| CVE-2026-12687 | Medium | 0.3% | Before 5.9.9.8 | 5.9.9.8 |
July 10, 2026 |
| CVE-2026-4610 | Medium | 0.3% | 0 to 5.9.9.2 (inclusive) | 5.9.9.3 |
June 23, 2026 |
| CVE-2026-4608 | Medium | 0.3% | 0 to 5.9.8.4 (inclusive) | 5.9.8.5 |
May 13, 2026 |
| CVE-2025-49033 | Medium | 0.3% | 5.9.5.3 and earlier | 5.9.5.4 |
July 24, 2025 |
| CVE-2025-49876 | Medium | 0.3% | 5.9.5.2 and earlier | 5.9.5.3 |
July 10, 2025 |
| CVE-2025-47478 | Medium | 0.4% | 5.9.5.0 and earlier | 5.9.5.1 |
May 12, 2025 |
| CVE-2025-39586 | Medium | 0.3% | 5.9.4.8 and earlier | 5.9.4.9 |
April 17, 2025 |
| CVE-2025-0723 | Medium | 0.4% | Before 5.9.4.8 | 5.9.4.8 |
March 22, 2025 |
| CVE-2026-25417 | Medium | 0.2% | 5.9.8.1 and earlier | 5.9.8.2 |
March 23, 2026 |
| CVE-2025-49877 | Medium | 0.1% | 5.9.5.2 and earlier | 5.9.5.3 |
June 12, 2025 |
| CVE-2025-4957 | Medium | 0.2% | 5.9.5.7 and earlier | 5.9.5.8 |
September 1, 2025 |
| CVE-2025-6977 | Medium | 0.3% | Before 5.9.5.5 | 5.9.5.5 |
July 16, 2025 |
| CVE-2024-13741 | Medium | 0.4% | Before 5.9.4.3 | 5.9.4.3 |
February 18, 2025 |
| CVE-2024-8861 | Medium | 0.3% | Before 5.9.3.3 | 5.9.3.3 |
September 26, 2024 |
| CVE-2024-37453 | Medium | 0.4% | 5.8.7 and earlier | 5.8.8 |
July 1, 2024 |
| CVE-2022-36352 | Medium | 0.4% | 5.0.3 and earlier | 5.0.4 |
October 27, 2022 |
| CVE-2026-16290 | Medium | 0.2% | 5.0.0.0 and earlier | 6.0.0.0 |
July 30, 2026 |
| CVE-2026-12688 | Medium | 0.2% | 5.9.9.6 and earlier | 5.9.9.7 |
July 3, 2026 |
| CVE-2026-1271 | Medium | 0.3% | 0 to 5.9.7.2 (inclusive) | 5.9.7.3 |
February 5, 2026 |
| CVE-2023-3404 | Medium | 0.7% | 5.5.0 and earlier | 5.5.1 |
August 31, 2023 |
| CVE-2023-3403 | Medium | 0.6% | 5.5.1 and earlier | 5.5.2 |
July 18, 2023 |
| CVE-2026-16291 | Medium | 0.2% | Before 5.9.9.8 | 5.9.9.8 |
August 2, 2026 |
| CVE-2026-16289 | Medium | 0.2% | 5.0.0.0 and earlier | 6.0.0.0 |
July 24, 2026 |
| CVE-2026-12689 | Medium | 0.1% | 5.9.9.6 and earlier | 5.9.9.7 |
July 3, 2026 |
| CVE-2026-12690 | Medium | 0.2% | 5.9.9.6 and earlier | 5.9.9.7 |
July 3, 2026 |
| CVE-2026-57759 | Medium | 0.2% | 5.9.9.8 and earlier | — | July 2, 2026 |
| CVE-2026-4607 | Medium | 0.2% | 0 to 5.9.8.4 (inclusive) | 5.9.8.5 |
May 13, 2026 |
| CVE-2026-2494 | Medium | 0.1% | 0 to 5.9.8.2 (inclusive) | 5.9.8.3 |
March 7, 2026 |
| CVE-2026-2488 | Medium | 0.2% | 0 to 5.9.8.1 (inclusive) | 5.9.8.2 |
March 7, 2026 |
| CVE-2025-13416 | Medium | 0.3% | 0 to 5.9.7.2 (inclusive) | 5.9.7.3 |
February 5, 2026 |
| CVE-2025-52719 | Medium | 0.2% | 5.9.5.2 and earlier | 5.9.5.3 |
June 19, 2025 |
| CVE-2025-48079 | Medium | 0.2% | 5.9.5.1 and earlier | 5.9.5.2 |
May 16, 2025 |
| CVE-2025-1408 | Medium | 0.3% | Before 5.9.4.5 | 5.9.4.5 |
March 22, 2025 |
| CVE-2024-13740 | Medium | 0.3% | Before 5.9.4.3 | 5.9.4.3 |
February 18, 2025 |
| CVE-2024-49273 | Medium | 0.3% | 5.9.3 and earlier | 5.9.3.1 |
October 14, 2024 |
| CVE-2024-6410 | Medium | 0.4% | Before 5.9.0 | 5.9.0 |
July 10, 2024 |
| CVE-2024-5453 | Medium | 0.4% | Before 5.8.7 | 5.8.7 |
June 5, 2024 |
| CVE-2024-3606 | Medium | 0.4% | Before 5.8.4 | 5.8.4 |
May 2, 2024 |
| CVE-2024-32808 | Medium | 0.4% | 5.7.9 and earlier | 5.8.0 |
April 22, 2024 |
| CVE-2024-32772 | Medium | 0.4% | 5.7.9 and earlier | 5.8.0 |
April 22, 2024 |
| CVE-2024-31362 | Medium | 0.2% | 5.7.8 and earlier | 5.7.9 |
April 8, 2024 |
| CVE-2024-31291 | Medium | 0.4% | 5.7.6 and earlier | 5.7.7 |
April 5, 2024 |
| CVE-2024-30513 | Medium | 0.5% | 5.7.2 and earlier | 5.7.3 |
March 28, 2024 |
| CVE-2023-52117 | Medium | 0.3% | 5.6.6 and earlier | 5.6.7 |
December 28, 2023 |
| CVE-2023-47644 | Medium | 0.3% | 5.7.1 and earlier | 5.7.2 |
November 7, 2023 |