Security Risk Category

profilegrid Security Risks

Published vulnerability pages connected to profilegrid. One risk can appear in multiple categories while keeping one canonical page.

profilegrid risks

Showing 1 of 1 published risks.

medium

ProfileGrid WooCommerce Integration Unauthorized Plugin Installation Vulnerability

The Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration plugin for WordPress is vulnerable to unauthorized plugin installation and activation in versions up to, and including, 3.4. This is due to a missing capability check and missing nonce validation on the pg_install_profilegrid() AJAX handler registered via wp_ajax_pg_install_profilegrid. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate the ProfileGrid plugin from wordpress.

CVE-2026-11359wordpresswoocommerceprofilegridauthorization-bypass

Updated Jul 10, 2026