Skip to content
OpenAdvisories
High · 8.8 CVE-2025-26999 EUVD-2025-5598GHSA-jmjv-7fjg-3vrm

WordPress ProfileGrid Plugin <= 5.9.4.3 - PHP Object Injection vulnerability

Published Mar 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Object Injection.This issue affects ProfileGrid : from n/a through <= 5.9.4.3.

Affected products

VendorProductAffectedFixed
Metagauss ProfileGrid ≤ 5.9.4.3 —

References