Metagauss vulnerabilities
118 CVEs and advisories name Metagauss as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-13741ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
- CVE-2025-25110WordPress Event Kikfyre plugin <= 2.1.8 - Broken Access Control vulnerability
- CVE-2025-24686WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-12024EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Unauthenticated Stored Cross-Site Scripting via Ticket Category and Ticket Type Name
- CVE-2023-49831WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability
- CVE-2024-10900ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Meta Deletion
- CVE-2024-10508RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery
- CVE-2024-9864EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-9865EventPrime – Modern Events Calendar, Bookings and Tickets <= 4.0.4.7 - Unauthenticated Stored Cross-Site Scripting via Transaction Log
- CVE-2024-9829Download Plugin <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) User Metadata and Comment Download
- CVE-2024-49273WordPress ProfileGrid plugin <= 5.9.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-47648WordPress EventPrime plugin <= 4.0.4.5 - Open Redirection vulnerability
- CVE-2024-8861ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-8369EventPrime <= 4.0.4.3 - Missing Authorization to Unauthenticated Private or Password-Protected Events Disclosure
- CVE-2024-6410ProfileGrid <= 5.8.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
- CVE-2024-6411ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
- CVE-2023-52117WordPress ProfileGrid plugin <= 5.6.6 - Broken Access Control vulnerability
- CVE-2024-31275WordPress EventPrime plugin <= 3.3.4 - Booking Price Manipulation vulnerability
- CVE-2024-5453ProfileGrid <= 5.8.6 - Missing Authorization
- CVE-2023-51544WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability
- CVE-2023-51543WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability
- CVE-2024-32774WordPress ProfileGrid plugin <= 5.8.2 - Group Members Limit Bypass vulnerability
- CVE-2023-33321WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure
- CVE-2024-33947WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3606ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.8.3 - Missing Authorization
- CVE-2023-23989WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection
- CVE-2023-23976WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change
- CVE-2024-32772WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-32808WordPress ProfileGrid plugin <= 5.7.9 - Insecure Direct Object Reference (IDOR) vulnerability
- CVE-2024-31362WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability