CVE-2024-6411

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.8.9. This is due to a lack of validation on user-supplied data in the 'pm_upload_image' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their user capabilities to Administrator.

• CWE-269

• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js#L361Product
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js#L390Product
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/coverimg_crop.phpProduct
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/crop.phpProduct
• https://plugins.trac.wordpress.org/changeset/3111609/Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2ef3c7fb-27f5-4829-8cb6-d3a52778a689?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js#L361Product
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/js/profile-magic-admin-power.js#L390Product
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/coverimg_crop.phpProduct
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/partials/crop.phpProduct
• https://plugins.trac.wordpress.org/changeset/3111609/Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2ef3c7fb-27f5-4829-8cb6-d3a52778a689?source=cveThird Party Advisory

Published

Jul 10, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6405The Floating Social Buttons plugin for WordPress is vulnerab…5.4
• CVE-2024-6406Missing Authentication for Critical Function, Missing Author…8.5
• CVE-2024-6407CWE-200: Information Exposure vulnerability exists that coul…7.5
• CVE-2024-6408The Slider by 10Web WordPress plugin before 1.2.57 does not…5.4
• CVE-2024-6409A race condition vulnerability was discovered in how signals…7
• CVE-2024-6410The ProfileGrid – User Profiles, Groups and Communities plug…4.3
• CVE-2024-6412The HTML Forms WordPress plugin before 1.3.34 does not have…6.5
• CVE-2024-6413Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-6414A vulnerability classified as problematic has been found in …6.9
• CVE-2024-6415A vulnerability classified as problematic was found in Ingen…5.1
• CVE-2024-6416A vulnerability was found in SeaCMS 12.9. It has been declar…9.8
• CVE-2024-6417A vulnerability was found in SourceCodester Simple Online Bi…7.5