CVE-2026-11359

The Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration plugin for WordPress is vulnerable to unauthorized plugin installation and activation in versions up to, and including, 3.4. This is due to a missing capability check and missing nonce validation on the pg_install_profilegrid() AJAX handler registered via wp_ajax_pg_install_profilegrid. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate the ProfileGrid plugin from wordpress.

• CWE-862

• https://plugins.trac.wordpress.org/browser/ecommerce-user-profiles-by-profilegrid/tags/3.4/admin/class-profilegrid-woocommerce-admin.php#L303
• https://plugins.trac.wordpress.org/browser/ecommerce-user-profiles-by-profilegrid/tags/3.4/admin/class-profilegrid-woocommerce-admin.php#L352
• https://plugins.trac.wordpress.org/browser/ecommerce-user-profiles-by-profilegrid/tags/3.4/includes/class-profilegrid-woocommerce.php#L166
• https://plugins.trac.wordpress.org/changeset?reponame=&old=3592677%40ecommerce-user-profiles-by-profilegrid&new=3592677%40ecommerce-user-profiles-by-profilegrid
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4cce2842-bd8e-4a83-b83c-66aefe4df4b8?source=cve

Published

Jul 9, 2026

Last Modified

Jul 9, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11351The ShinyStat Analytics WordPress plugin before 1.0.17 does …5.3
• CVE-2026-11352An issue in curl’s QUIC UDP receive function allows a malici…7.5
• CVE-2026-11354The Participants Database plugin for WordPress is vulnerable…5.3
• CVE-2026-11356The Ivory Search – WordPress Search Plugin plugin for WordPr…4.4
• CVE-2026-11357The Kadence Blocks — Page Builder Toolkit for Gutenberg Edit…4.3
• CVE-2026-11358The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cook…4.4
• CVE-2026-1136A weakness has been identified in lcg0124 BootDo up to e93dd…3.5
• CVE-2026-11360The Advanced Order Export For WooCommerce plugin for WordPre…4.9
• CVE-2026-11361The Formidable Forms WordPress plugin before 6.32.1 does not…5.9
• CVE-2026-11362DataDog::DogStatsd versions through 0.07 for Perl allow metr…9.8
• CVE-2026-11364The Product Specifications for WooCommerce plugin for WordPr…4.3
• CVE-2026-11366The MonsterInsights WordPress plugin before 11.1.0 does not…3.7