Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-62061 EUVD-2026-90807GHSA-rq8q-x9jv-jf8h

WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2.

Affected products

VendorProductAffectedFixed
Metagauss ProfileGrid ≤ 6.0.0.2 —

References