ProfileGrid – User Profiles, Groups and Communities Security & Risk Analysis

ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion

ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial

ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification

ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension

ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.7 - Reflected Cross-Site Scripting

ProfileGrid <= 5.9.5.3 - Authenticated (Subscriber+) SQL Injection

ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function

ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) SQL Injection

ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) Full Path Disclosure

ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) Server-Side Request Forgery

ProfileGrid <= 5.9.5.1 - Missing Authorization

ProfileGrid <= 5.9.5.0 - Authenticated (Subscriber+) SQL Injection

ProfileGrid <= 5.9.4.8 - Authenticated (Subscriber+) SQL Injection

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection

ProfileGrid <= 5.9.4.3 - Authenticated (Subscriber+) PHP Object Injection

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure

ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery

ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion

ProfileGrid <= 5.9.3 - Cross-Site Request Forgery

ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference

ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation

ProfileGrid <= 5.8.7 - Missing Authorization

ProfileGrid <= 5.8.6 - Missing Authorization

ProfileGrid <= 5.7.1 - Authenticated (Contributor+) SQL Injection

ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference

ProfileGrid <= 5.8.2 - Bypass Group Members Limit

ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.7.9 - Insecure Direct Object Reference

ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization

ProfileGrid <= 5.7.8 - Cross-Site Request Forgery

ProfileGrid <= 5.7.6 - Authenticated (Subscriber+) Insecure Direct Object Reference

ProfileGrid <= 5.7.8 - Unauthenticated SQL Injection

ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection

ProfileGrid <= 5.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference

ProfileGrid <= 5.6.6 - Missing Authorization

ProfileGrid <= 5.7.1 - Cross-Site Request Forgery

ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update

ProfileGrid <= 5.5.0 - Hardcoded Encryption Key

ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation

ProfileGrid <= 5.5.1 - Missing Authorization to User Import

ProfileGrid <= 5.3.0 - Missing Authorization to Arbitrary Password Reset

ProfileGrid <= 5.1.7 - Authenticated (Subscriber+) CSV Injection

ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.0.3 - Missing Authorization to Information Exposure

ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.1.0 - Reflected Cross-Site Scripting

ProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 - Stored Cross-Site Scripting via Profile

ProfileGrid – User Profiles, Memberships, Groups and Communities < 2.8.6 - Remote Code Execution