Metagauss vulnerabilities
118 CVEs and advisories name Metagauss as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-1991RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation
- CVE-2024-1990RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode
- CVE-2024-31291WordPress ProfileGrid plugin <= 5.7.6 - IDOR on Friend Request vulnerability
- CVE-2024-30513WordPress ProfileGrid plugin <= 5.7.2 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2024-30491WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - SQL Injection vulnerability
- CVE-2024-30490WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability
- CVE-2024-30241WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability
- CVE-2024-29776WordPress EventPrime plugin <= 3.3.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-2951WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-24832WordPress EventPrime plugin <= 3.3.9 - Broken Access Control vulnerability
- CVE-2024-25935WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability
- CVE-2024-29113WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-1126EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Attendee List Retrieval
- CVE-2024-1321EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Unauthenticated Booking Payment Bypass
- CVE-2024-1127EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Event Export
- CVE-2024-1125EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
- CVE-2024-1320EventPrime – Events Calendar, Bookings and Tickets <= 3.4.3 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-1123EventPrime – Events Calendar, Bookings and Tickets <= 3.4.2 - Missing Authorization to Arbitrary Post Overwrite
- CVE-2024-1124EventPrime – Events Calendar, Bookings and Tickets <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
- CVE-2023-51509WordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3404ProfileGrid <= 5.5.0 - Hardcoded Encryption Key
- CVE-2023-3403ProfileGrid <= 5.5.1 - Missing Authorization to User Import
- CVE-2023-3714ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation
- CVE-2023-3713ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update
- CVE-2022-38062WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-36345WordPress Download Plugin Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-2548RegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change
- CVE-2023-2499RegistrationMagic <= 5.2.1.0 - Authentication Bypass