Login Request a demo
ME
Vendor
Metagauss
12 products with CVEs on record
193
CVEs
0
On KEV
2
New 30D
Products
PR
ProfileGrid
Metagauss
9.8
49 CVEs0 on KEV2 new
RE
RegistrationMagic
Metagauss
9.8
42 CVEs0 on KEV0 new
EV
EventPrime
Metagauss
9.8
35 CVEs0 on KEV0 new
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
9.8
25 CVEs0 on KEV0 new
EE
EventPrime – Events Calendar, Bookings and Tickets
metagauss
7.2
17 CVEs0 on KEV0 new
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
9.8
15 CVEs0 on KEV0 new
DP
Download Plugin
metagauss
8.8
5 CVEs0 on KEV0 new
DT
Download Theme
Metagauss
8.8
1 CVEs0 on KEV0 new
EK
Event Kikfyre
Metagauss
5.4
1 CVEs0 on KEV0 new
LE
Leadmagic
Metagauss
4.8
1 CVEs0 on KEV0 new
MA
Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration
metagauss
4.3
1 CVEs0 on KEV0 new
TN
Themeflection Numbers
Metagauss
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-94663
PR
ProfileGrid
Metagauss
8.5
0%
Oct 9WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability
CVE-2026-62061
PR
ProfileGrid
Metagauss
5.3
0%
Oct 1WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-82225
RE
RegistrationMagic
Metagauss
7.4
0%
Aug 31WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability
CVE-2026-82221
RE
RegistrationMagic
Metagauss
7.1
0%
Aug 31WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73341
RE
RegistrationMagic
Metagauss
9.8
1%
Aug 18WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability
CVE-2026-57697
PR
ProfileGrid
Metagauss
7.5
0%
Jul 13WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability
CVE-2026-13441
EE
EventPrime – Events Calendar, Bookings and Tickets
metagauss
7.2
0%
Jul 9EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter
CVE-2026-11359
MA
Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration
metagauss
4.3
0%
Jul 9Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation
CVE-2026-57759
PR
ProfileGrid
Metagauss
8.8
0%
Jul 2WordPress ProfileGrid plugin <= 6.0.0.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-12158
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
8.8
0%
Jul 1RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter
CVE-2026-12073
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
9.8
1%
Jun 30ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
CVE-2026-9242
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
5.3
0%
Jun 27RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request
CVE-2026-4610
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
6.4
0%
Jun 23ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
CVE-2026-49764
RE
RegistrationMagic
Metagauss
9.8
0%
Jun 15WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability
CVE-2026-4609
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
7.1
0%
May 13ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
CVE-2026-4607
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
4.3
0%
May 13ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
CVE-2026-4608
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
6.5
0%
May 13ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter
CVE-2026-32498
RE
RegistrationMagic
Metagauss
7.5
0%
Mar 25WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability
CVE-2026-25417
PR
ProfileGrid
Metagauss
6.5
0%
Mar 25WordPress ProfileGrid plugin <= 5.9.8.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24378
EV
EventPrime
Metagauss
9.8
1%
Mar 25WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability
CVE-2026-24373
RE
RegistrationMagic
Metagauss
8.1
0%
Mar 25WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability
CVE-2025-69358
EV
EventPrime
Metagauss
7.5
0%
Mar 25WordPress EventPrime plugin <= 4.2.6.0 - Broken Access Control vulnerability
CVE-2026-25312
EV
EventPrime
Metagauss
7.5
0%
Mar 19WordPress EventPrime plugin <= 4.2.8.3 - Payment Bypass vulnerability
CVE-2026-32385
RE
RegistrationMagic
Metagauss
5.4
0%
Mar 13WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability
CVE-2026-2494
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
4.3
0%
Mar 7ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial
CVE-2026-2488
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
4.3
0%
Mar 7ProfileGrid <= 5.9.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Message Deletion
CVE-2026-25389
EV
EventPrime
Metagauss
5.3
0%
Feb 19WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability
CVE-2025-14444
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
5.3
0%
Feb 18RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment
CVE-2026-1655
EE
EventPrime – Events Calendar, Bookings and Tickets
metagauss
4.3
0%
Feb 18EventPrime <= 4.2.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Event Modification via 'event_id' Parameter
CVE-2026-1657
EE
EventPrime – Events Calendar, Bookings and Tickets
metagauss
5.3
0%
Feb 17EventPrime <= 4.2.8.4 - Missing Authorization to Unauthenticated Image Upload via 'ep_upload_file_media' AJAX Endpoint
CVE-2026-1271
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
5.3
0%
Feb 5ProfileGrid <= 5.9.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Profile and Cover Image Modification
CVE-2025-13416
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
4.3
0%
Feb 5ProfileGrid – User Profiles, Groups and Communities <= 5.9.7.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Suspension
CVE-2026-1054
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
5.3
0%
Jan 28RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification
CVE-2026-24380
EV
EventPrime
Metagauss
5.3
0%
Jan 22WordPress EventPrime plugin <= 4.2.8.0 - Broken Access Control vulnerability
CVE-2026-24374
RE
RegistrationMagic
Metagauss
5.4
0%
Jan 22WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-15403
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
9.8
2%
Jan 17RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order
CVE-2025-14507
EE
EventPrime – Events Calendar, Bookings and Tickets
metagauss
5.3
0%
Jan 13EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API
CVE-2025-13610
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
6.4
0%
Dec 15RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode
CVE-2025-63007
EV
EventPrime
Metagauss
4.3
0%
Dec 9WordPress EventPrime plugin <= 4.2.4.1 - Sensitive Data Exposure vulnerability
CVE-2025-63006
EV
EventPrime
Metagauss
4.3
0%
Dec 9WordPress EventPrime plugin <= 4.2.4.1 - Broken Access Control vulnerability
CVE-2025-12498
EE
EventPrime – Events Calendar, Bookings and Tickets
metagauss
4.3
0%
Nov 8EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation
CVE-2017-20208
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
9.8
1%
Oct 18RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection
CVE-2025-11204
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
7.2
0%
Oct 8RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection
CVE-2025-4957
PR
ProfileGrid
Metagauss
7.1
0%
Sep 26WordPress ProfileGrid plugin <= 5.9.5.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49033
PR
ProfileGrid
Metagauss
8.5
0%
Aug 14WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability
CVE-2025-49876
PR
ProfileGrid
Metagauss
8.5
0%
Jul 16WordPress ProfileGrid plugin <= 5.9.5.2 - SQL Injection vulnerability
CVE-2025-6977
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
6.1
0%
Jul 16ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function
CVE-2025-6586
DP
Download Plugin
metagauss
7.2
1%
Jul 4Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload
CVE-2025-52719
PR
ProfileGrid
Metagauss
4.3
0%
Jun 20WordPress ProfileGrid plugin <= 5.9.5.2 - Full Path Disclosure (FPD) Vulnerability
CVE-2025-49877
PR
ProfileGrid
Metagauss
4.9
0%
Jun 17WordPress ProfileGrid plugin <= 5.9.5.2 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-47478
PR
ProfileGrid
Metagauss
8.5
0%
May 23WordPress ProfileGrid plugin <= 5.9.5.0 - SQL Injection Vulnerability
CVE-2025-48079
PR
ProfileGrid
Metagauss
4.3
0%
May 16WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability
CVE-2024-4665
EV
Eventprime
Metagauss
6.4
0%
May 15EventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings update
CVE-2024-9390
RE
Registrationmagic
Metagauss
4.8
0%
May 15RegistrationMagic < 6.0.2.1 - Stored XSS
CVE-2025-39586
PR
ProfileGrid
Metagauss
8.5
0%
Apr 17WordPress ProfileGrid plugin <= 5.9.4.8 - SQL Injection Vulnerability
CVE-2025-2836
RC
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
metagauss
6.4
0%
Apr 4RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2025-0724
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
8.8
1%
Mar 22ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection
CVE-2025-1408
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
4.3
0%
Mar 22ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management
CVE-2025-0723
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
6.5
0%
Mar 22ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.7 - Authenticated (Subscriber+) SQL Injection
CVE-2024-13526
EE
EventPrime – Events Calendar, Bookings and Tickets
metagauss
4.3
0%
Mar 7EventPrime – Events Calendar, Bookings and Tickets <= 4.0.7.3 - Missing Authorization to Authenticated (Subscriber+) Event Attendees Export