Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

WordPress ProfileGrid Plugin Missing Authorization for Plugin Installation and Activation (CVE-2026-11359)

www.wordfence.com 2026-07-09 查看中文 →
Security Advisory CVE-2026-11359 Medium ProfileGrid
Affected:
  • ecommerce-user-profiles-by-profilegrid <= 3.4
Fixed in:
  • 3.4.1
Referenced CVEs: CVE-2026-11359 · 4.3
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
WordPress Plugin Translatify v3.3.1 Unauthenticated Account Takeover via Password Reset Link Disclosure 2026-08-26 FluentCRM Pro v1.12.1 Authenticated SQL Injection Vulnerability and POC 2026-08-26 WordPress Elementor WooCommerce Builder Addon Privilege Escalation via PDF Import 2026-08-25 WordPress Newsletter Plugin Missing Authorization Arbitrary Modification (CVE-2024-2825) 2026-08-25 Media Demy <=1.1.9 Authenticated SQL Injection via Bulk Payment (CVE-2023-2825) POC 2026-08-25
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro