CVE-2026-11359

MediumCVSS 4.3/10Last modified Jul 9, 2026

Description

The Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration plugin for WordPress is vulnerable to unauthorized plugin installation and activation in versions up to, and including, 3.4. This is due to a missing capability check and missing nonce validation on the pg_install_profilegrid() AJAX handler registered via wp_ajax_pg_install_profilegrid. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate the ProfileGrid plugin from wordpress.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
metagauss	Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration	<= 3.4

References

Timeline

Published: Jul 9, 2026
Last modified: Jul 9, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-1135933.1An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. The `django.middleware.cache.UpdateCacheMiddle CVE-2026-1135945.4Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by CVE-2026-1135954.3Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated m CVE-2026-1135963.1Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data vi CVE-2026-1135975.4Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated users to re CVE-2026-1135984.3Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other do CVE-2026-1135995.4Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to create auto-reply message CVE-2026-11363.5A weakness has been identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. Affected is the function Save of the file /CVE-2026-113604.9The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in CVE-2026-1136005.4Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete ot CVE-2026-1136014.3Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivities and GetActivity API methods that al CVE-2026-1136025.3json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks b