https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T16:37:54.177579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285495 EUVD-2026-285495 2026-10-21T16:37:54.191340+00:00 EUVD-2026-285495 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5453 fkie_cve-2024-5453 2026-10-21T16:37:54.191390+00:00

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pm_dismissible_notice and pm_wizard_update_group_icon functions in all versions up to, and including, 5.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary options to the value '1' or change group icons.

 https://cve.radiocsirt.org/vuln/ghsa-p82q-4g4j-x67h GHSA-p82q-4g4j-x67h 2026-10-21T16:37:54.191449+00:00

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pm_dismissible_notice and pm_wizard_update_group_icon functions in all versions up to, and including, 5.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary options to the value '1' or change group icons.