Boris Bogosavac

**Name of the Vulnerable Software and Affected Versions** ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to and including 5.9.8.1 **Description** The ProfileGrid plugin for WordPress is affected by an issue allowing unauthorized message deletion. This occurs because the `pg delete msg()` function lacks a proper capability check, enabling authenticated attackers with Subscriber-level access or higher to delete messages belonging to any user. Exploitation involves sending a direct request with a valid message ID through the `mid` parameter. **Recommendations** Update ProfileGrid – User Profiles, Groups and Communities plugin for WordPress to a version later than 5.9.8.1.

**Name of the Vulnerable Software and Affected Versions** ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to and including 5.9.8.2 **Description** The ProfileGrid plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF). This is a result of a lack of nonce validation on the membership request management page, specifically during approve and decline actions. An unauthenticated attacker can potentially approve or deny group membership requests by tricking a site administrator into performing an action, such as clicking a malicious link. The affected functionality involves the processing of membership requests. **Recommendations** Update ProfileGrid – User Profiles, Groups and Communities plugin for WordPress to a version later than 5.9.8.2.

**Name of the Vulnerable Software and Affected Versions** The Newsletter – Send awesome emails from WordPress plugin versions prior to 9.1.1 **Description** The software is susceptible to a Cross-Site Request Forgery (CSRF) issue. This is caused by insufficient or incorrect nonce validation within the `hook newsletter action()` function. An unauthenticated attacker could potentially unsubscribe newsletter subscribers by forging a request, provided they can trick a logged-in user into performing an action, such as clicking a malicious link. **Recommendations** Update The Newsletter – Send awesome emails from WordPress plugin to version 9.1.1 or later.

**Nome do Software Vulnerável e Versões Afetadas** O plugin Ultimate Member para WordPress em versões anteriores à 2.11.1 **Descrição** O plugin Ultimate Member para WordPress possui uma falha em seu mecanismo de campos seguros. As chaves dos campos são armazenadas na lista de campos permitidos antes da aplicação da verificação `required perm` durante a renderização. Isso permite que atacantes autenticados com acesso de nível de Assinante modifiquem suas configurações de privacidade de perfil, como definir a visibilidade do perfil como "Somente eu", por meio da manipulação direta de parâmetros, mesmo que o administrador tenha desativado essa opção para sua função. **Recomendações** Atualize o plugin Ultimate Member para a versão 2.11.1 ou superior.