Medium
CVE-2026-94663
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 64
Reset filters
Medium
CVE-2026-62061
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-16291
ProfileGrid – User Profiles, Groups and Communities < 5.9.9.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-16290
ProfileGrid <= 5.0.0.0 - Missing Authorization
Medium
CVE-2026-16289
ProfileGrid <= 5.0.0.0 - Missing Authorization
Medium
CVE-2026-12687
ProfileGrid – User Profiles, Groups and Communities < 5.9.9.8 - Unauthenticated Group Registration Bypass
Critical
CVE-2026-57697
ProfileGrid – User Profiles, Groups and Communities <= 5.9.9.6 - Unauthenticated Privilege Escalation via Password Reset
Medium
CVE-2026-12688
ProfileGrid <= 5.9.9.6 - Unauthenticated Payment Bypass
Medium
CVE-2026-12690
ProfileGrid <= 5.9.9.6 - Missing Authorization
Medium
CVE-2026-12689
ProfileGrid <= 5.9.9.6 - Missing Authorization
Medium
CVE-2026-57759
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Cross-Site Request Forgery
Critical
CVE-2026-12073
ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
Medium
CVE-2026-4610
ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
High
CVE-2026-4609
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
Medium
CVE-2026-4607
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
Medium
CVE-2026-4608
ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter
Medium
CVE-2026-25417
ProfileGrid – User Profiles, Groups and Communities <= 5.9.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-2488
ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
Medium
CVE-2026-2494
ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
Medium
CVE-2026-1271
ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification
Medium
CVE-2025-13416
ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension
Medium
CVE-2025-4957
ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-49033
ProfileGrid <= 5.9.5.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-6977
ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.