Boris Bogosavac

**Name of the Vulnerable Software and Affected Versions** ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to and including 5.9.8.1 **Description** The ProfileGrid plugin for WordPress is affected by an issue allowing unauthorized message deletion. This occurs because the `pg delete msg()` function lacks a proper capability check, enabling authenticated attackers with Subscriber-level access or higher to delete messages belonging to any user. Exploitation involves sending a direct request with a valid message ID through the `mid` parameter. **Recommendations** Update ProfileGrid – User Profiles, Groups and Communities plugin for WordPress to a version later than 5.9.8.1.

**Name of the Vulnerable Software and Affected Versions** ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to and including 5.9.8.2 **Description** The ProfileGrid plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF). This is a result of a lack of nonce validation on the membership request management page, specifically during approve and decline actions. An unauthenticated attacker can potentially approve or deny group membership requests by tricking a site administrator into performing an action, such as clicking a malicious link. The affected functionality involves the processing of membership requests. **Recommendations** Update ProfileGrid – User Profiles, Groups and Communities plugin for WordPress to a version later than 5.9.8.2.

**Name of the Vulnerable Software and Affected Versions** The Newsletter – Send awesome emails from WordPress plugin versions prior to 9.1.1 **Description** The software is susceptible to a Cross-Site Request Forgery (CSRF) issue. This is caused by insufficient or incorrect nonce validation within the `hook newsletter action()` function. An unauthenticated attacker could potentially unsubscribe newsletter subscribers by forging a request, provided they can trick a logged-in user into performing an action, such as clicking a malicious link. **Recommendations** Update The Newsletter – Send awesome emails from WordPress plugin to version 9.1.1 or later.

**Name of the Vulnerable Software and Affected Versions** The Ultimate Member plugin for WordPress versions prior to 2.11.1 **Description** The Ultimate Member plugin for WordPress has a flaw in its secure fields mechanism. Field keys are stored in the allowed fields list before the `required perm` check is applied during rendering. This allows authenticated attackers with Subscriber-level access to modify their profile privacy settings, such as setting profile visibility to "Only me," through direct parameter manipulation, even if the administrator has disabled this option for their role. **Recommendations** Update The Ultimate Member plugin to version 2.11.1 or later.