CVE-2026-12690
Vulnerability Description
The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its license management actions, relying only on a nonce that is exposed to any logged-in user, allowing authenticated users with Subscriber-level access and above to overwrite the site's premium license settings.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Unknown
Product
ProfileGrid
Discussion (0)
Add Comment
No comments yet. Be the first!