Technical impact
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress contains a blind SQL Injection vulnerability caused by insufficient escaping of the user-supplied 'rid' parameter and the absence of proper query preparation. An attacker who is authenticated with at least a Subscriber role can append additional SQL statements to the existing query, enabling extraction of sensitive information from the database. The weakness is identified as CWE‑89, indicating an input value error that allows the construction of malicious SQL commands.
Affected Systems
All installations of the Metagauss ProfileGrid plugin for WordPress up to and including version 5.9.8.4 are affected. The plugin provides user profile, group, and community functionality and is commonly deployed in WordPress environments where it is essential to verify that a security fix is applied when newer releases become available.
Risk and Exploitability
The CVSS score of 6.5 indicates a moderate severity impact. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog. Based on the description, the likely attack vector is an authenticated interaction via the 'rid' parameter by a user with Subscriber-level access or higher. Exploitation does not require additional privileges beyond that, and the absence of input validation allows an attacker to perform blind injection, potentially revealing confidential database content.
