ProfileGrid

Authenticated (Subscriber+) SQL Injection vulnerability <= 5.9.4.7

8.5

21 March, 2025

PHP Object Injection vulnerability <= 5.9.4.3

8.8

23 February, 2025

Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure vulnerability <= 5.9.4.2

4.3

17 February, 2025

Authenticated (Subscriber+) Limited ServerSide Request Forgery vulnerability <= 5.9.4.2

5.4

17 February, 2025

Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion vulnerability <= 5.9.3.6

6.5

19 November, 2024