PT-2026-56710 · WordPress · Memberships/User Profiles For Woocommerce+1

John · Published 2026-07-09 · Updated 2026-07-09 · CVE-2026-11359

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration versions prior to 3.5

Description Authenticated users with Subscriber-level access and above can perform unauthorized installation and activation of the ProfileGrid plugin. This occurs because the pg install profilegrid() function, handled via the wp ajax pg install profilegrid AJAX endpoint, lacks proper capability checks and nonce validation. A nonce is a unique token used to protect against cross-site request forgery by verifying that the request was intentionally sent by the user.

Recommendations Update the plugin to a version later than 3.4.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-11359

Affected Products

Memberships/User Profiles For Woocommerce

Profilegrid

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-11359 · Security Note
• https://plugins.trac.wordpress.org/browser/ecommerce-user-profiles-by-profilegrid/tags/3.4/admin/class-profilegrid-woocommerce-admin.php#L303 · Note
• https://plugins.trac.wordpress.org/browser/ecommerce-user-profiles-by-profilegrid/tags/3.4/admin/class-profilegrid-woocommerce-admin.php#L352 · Note
• https://plugins.trac.wordpress.org/browser/ecommerce-user-profiles-by-profilegrid/tags/3.4/includes/class-profilegrid-woocommerce.php#L166 · Note
• https://reddit.com/r/pwnhub/comments/1urqbhc/the_memberships_and_user_profiles_for_woocommerce · Reddit Post
• https://plugins.trac.wordpress.org/changeset?reponame=&old=3592677%40ecommerce-user-profiles-by-profilegrid&new=3592677%40ecommerce-user-profiles-by-profilegrid · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/4cce2842-bd8e-4a83-b83c-66aefe4df4b8?source=cve · Note