ProfileGrid – User Profiles, Memberships, Groups and Communities, b76e1953-95db-4cd9-99c9-58922db2109a

CVE, Research URL: b76e1953-95db-4cd9-99c9-58922db2109a
Home page URL: Security reports for ProfileGrid – User Profiles, Memberships, Groups and Communities
Application: ProfileGrid – User Profiles, Memberships, Groups and Communities
Published on: -
Research Description: ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities] < 5.0.4 ProfileGrid < 5.0.4 - Subscriber+ Private Message Read/Edition The plugin does not have any authorisation and CSRF checks when accessing and editing messages, which could allow any logged in users, such as subscriber to access and edit arbitrary messages
Affected versions: max 5.0.4.
Status: vulnerable