Vulnerability in Profilegrid

CVE-2026-12689

The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users with Subscriber-level access and above to soft-delete, tampe…

Affected products

  • Unknown Profilegrid — versions 0

References