Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-52719 EUVD-2025-28455GHSA-wgpv-c3r2-3v2f

WordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability

Published Jun 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Retrieve Embedded Sensitive Data.This issue affects ProfileGrid : from n/a through <= 5.9.5.2.

Affected products

VendorProductAffectedFixed
Metagauss ProfileGrid ≤ 5.9.5.2 —

References