metagauss
Enterprise Softwarecommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting metagauss.
- CVE-2026-73341WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability9.8
- CVE-2026-57697WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability7.5
- CVE-2026-13441EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter7.2
- CVE-2026-11359Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation4.3
- CVE-2026-57759WordPress ProfileGrid plugin <= 5.9.9.7 - CSRF to Account Takeover vulnerability8.8
- CVE-2026-12158RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter8.8
- CVE-2026-12073ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite9.8
- CVE-2026-9242RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request5.3
- CVE-2026-4610ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content6.4
- CVE-2026-49764WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability9.8
- CVE-2026-4607ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification4.3
- CVE-2026-4609ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining7.1
- CVE-2026-4608ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter6.5
- CVE-2026-32498WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability7.5
- CVE-2026-25417WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability6.5