metagauss vulnerabilities

Recent CVEs affecting metagauss products. 27 tracked.

metagauss has 27 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 27. Most recent: 2025-10-18. Highest priority: CVE-2024-10508 (score 58/100).

• CVE-2025-6977 MEDIUM 6.1 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Reflected Cross-
• CVE-2025-24686 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagaus
• CVE-2025-1408 MEDIUM 4.3 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized mod
• CVE-2025-0724 HIGH 8.8 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injec
• CVE-2025-0723 MEDIUM 6.5 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-b
• CVE-2024-9865 MEDIUM 6.1 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site
• CVE-2024-9864 MEDIUM 6.1 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site
• CVE-2024-9829 MEDIUM 6.5 UPGRADE The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabil
• CVE-2024-9390 MEDIUM 4.8 UPGRADE The RegistrationMagic WordPress plugin before 6.0.2.1 does not sanitise and escape some of its settings, whic
• CVE-2024-8861 MEDIUM 6.4 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Sit
• CVE-2024-8369 MEDIUM 5.3 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized acce
• CVE-2024-6411 HIGH 8.8 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escala
• CVE-2024-6410 MEDIUM 4.3 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct
• CVE-2024-4665 MEDIUM 6.4 UPGRADE The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, al
• CVE-2024-49273 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities
• CVE-2024-43317 MEDIUM 4.3 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in M
• CVE-2024-43223 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured A
• CVE-2024-39643 MEDIUM 5.8 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in R
• CVE-2024-37453 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in ProfileGrid User Profiles ProfileGrid allows Exploiting Incorrectly Con
• CVE-2024-13741 MEDIUM 5.4 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-S
• CVE-2024-13740 MEDIUM 4.3 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct
• CVE-2024-13526 MEDIUM 4.3 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized acce
• CVE-2024-12024 HIGH 7.2 UPGRADE The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site
• CVE-2024-10900 MEDIUM 6.5 UPGRADE The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized mod
• CVE-2024-10508 CRITICAL 9.8 UPGRADE The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulner
• CVE-2023-49831 HIGH 7.5 UPGRADE Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submi
• CVE-2017-20208 CRITICAL 9.8 UPGRADE The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordP

FAQ

How do I fix metagauss vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is metagauss being exploited right now?

None of the tracked metagauss CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which metagauss CVE should I patch first?

CVE-2024-10508 currently ranks highest (58/100): The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulner.

Products

• download plugin
• eventprime
• profilegrid
• registrationmagic

RSS feed for metagauss · ← Back to latest CVEs