WordPress plugin
Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation ≤3.4Update to 3.4.1 | CVE-2026-11359 |
- Medium4.3Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation
≤3.4Update to 3.4.1
Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration: common questions
Does Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration: 1 medium. None are known to affect version null.
How do I check which version of Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration vulnerability?
CVE-2026-11359, published Jul 8, 2026: Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation. Severity: Medium (CVSS 4.3).
Is any Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration vulnerability listed in CISA KEV?
No. None of the known Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration vulnerabilities is currently listed in the CISA KEV catalog.