CVE-2026-4607

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.9.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action via the pm_set_group_order, pm_set_group_items, and pm_set_field_order AJAX actions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify site-wide ProfileGrid group settings including group menu order, group list order, group icon display, and field ordering.

• CWE-862

• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/admin/class-profile-magic-admin.php#L870
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/admin/class-profile-magic-admin.php#L875
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/admin/class-profile-magic-admin.php#L880
• https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/admin/partials/set-groups-order.php#L11
• https://plugins.trac.wordpress.org/changeset/3491679/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/5f38f9f0-7c15-4c07-b501-b523ea58432a?source=cve

Published

May 13, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46064In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-46065In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46066In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46067In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-46068In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46069In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46070In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-46071In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46072In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46073In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46074In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46075In the Linux kernel, the following vulnerability has been re…7.8