PT-2025-9484 · Metagauss · Metagauss Profilegrid

Phat Rio - Bluerock · Publicado 2025-03-03 · Atualizado 2025-03-06 · CVE-2025-26999

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Metagauss ProfileGrid versions 5.9.4.3 and earlier

Description The issue is related to the Deserialization of Untrusted Data, which allows Object Injection.

Recommendations For Metagauss ProfileGrid versions 5.9.4.3 and earlier, update to a version that contains a fix for this issue.

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2025-26999

Produtos afetados

Metagauss Profilegrid

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-26999 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-plugin-5-9-4-3-php-object-injection-vulnerability?_s_id=cve · Nota
• https://twitter.com/CveFindCom/status/1896561711575875764 · Publicação no Twitter
• https://patchstack.com/database/wordpress/plugin/profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-plugin-5-9-4-3-php-object-injection-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/1897539199831826591 · Publicação no Twitter