CVE-2026-2488

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized message deletion due to a missing capability check on the pg_delete_msg() function in all versions up to, and including, 5.9.8.1. This is due to the function not verifying that the requesting user has permission to delete the targeted message. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary messages belonging to any user by sending a direct request with a valid message ID (mid parameter).

• CWE-862

• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.7.1/includes/class-profile-magic.php#L372
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/5.9.7.1/public/class-profile-magic-public.php#L5913
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/includes/class-profile-magic.php#L372
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L5913
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3464213%40profilegrid-user-profiles-groups-and-communities&new=3464213%40profilegrid-user-profiles-groups-and-communities&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4c611fa0-28ef-4425-8614-fb61e250e625?source=cve

Published

Mar 7, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-24870Exposure of Sensitive Information to an Unauthorized Actor v…7.5
• CVE-2026-24871Improper Control of Generation of Code ('Code Injection') vu…10
• CVE-2026-24872improper pointer arithmetic vulnerability in ProjectSkyfir…9.8
• CVE-2026-24873Out-of-bounds Read vulnerability in Rinnegatamante lpp-vita.…7.8
• CVE-2026-24874Access of Resource Using Incompatible Type ('Type Confusion'…9.1
• CVE-2026-24875Integer Overflow or Wraparound vulnerability in yoyofr modiz…7.8
• CVE-2026-24880Inconsistent Interpretation of HTTP Requests ('HTTP Request/…7.5
• CVE-2026-24881In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData…9.8
• CVE-2026-24882In GnuPG before 2.5.17, a stack-based buffer overflow exists…7.8
• CVE-2026-24883In GnuPG before 2.5.17, a long signature packet length cause…5.5
• CVE-2026-24884Compressing is a compressing and uncompressing lib for node.…7.8
• CVE-2026-24885Kanboard is project management software focused on Kanban me…8