Metagauss Security Vulnerabilities (CVEs)
Track 32 security vulnerabilities affecting Metagauss products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.
This vulnerability allows unauthenticated attackers to execute arbitrary PHP code on WordPress sites using vulnerable versions of the RegistrationMagi...
Oct 18, 2025This vulnerability allows high-privilege WordPress users (like administrators) to inject malicious scripts into the RegistrationMagic plugin settings,...
May 15, 2025The EventPrime WordPress plugin before version 3.5.0 has an authorization bypass vulnerability that allows authenticated users to modify or cancel boo...
May 15, 2025The ProfileGrid WordPress plugin is vulnerable to PHP object injection via deserialization of untrusted input, allowing authenticated attackers with S...
Mar 22, 2025This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to approve or decline group join requests, which should...
Mar 22, 2025This reflected cross-site scripting (XSS) vulnerability in the RegistrationMagic WordPress plugin allows attackers to inject malicious scripts into we...
Jan 31, 2025This CVE describes a Missing Authorization vulnerability in the RegistrationMagic WordPress plugin that allows attackers to bypass access controls. It...
Dec 9, 2024The ProfileGrid WordPress plugin has an authorization vulnerability that allows authenticated users (even with low-privilege subscriber accounts) to d...
Nov 20, 2024This vulnerability allows unauthenticated attackers to reset passwords of any WordPress user, including administrators, by exploiting improper token v...
Nov 9, 2024This vulnerability allows unauthenticated attackers to inject malicious scripts into WordPress websites using the EventPrime plugin. When front-end us...
Oct 24, 2024The Download Plugin for WordPress has missing capability checks that allow authenticated attackers with Subscriber-level access or higher to download ...
Oct 23, 2024ProfileGrid WordPress plugin versions up to 5.9.3 have a missing authorization vulnerability that allows attackers to perform unauthorized actions. Th...
Oct 21, 2024The EventPrime WordPress plugin has an authorization bypass vulnerability that allows unauthenticated attackers to view private or password-protected ...
Sep 10, 2024This vulnerability allows attackers to inject malicious scripts into web pages generated by the RegistrationMagic WordPress plugin. When users view af...
Aug 19, 2024The ProfileGrid WordPress plugin has a privilege escalation vulnerability that allows authenticated users with Subscriber-level access or higher to el...
Jul 10, 2024This CVE describes a Missing Authorization (Broken Access Control) vulnerability in the ProfileGrid WordPress plugin. It allows unauthorized users to ...
Jun 12, 2024This CVE describes a Missing Authorization vulnerability in the EventPrime WordPress plugin that allows attackers to manipulate booking prices without...
Jun 9, 2024The ProfileGrid WordPress plugin has a missing capability check vulnerability that allows authenticated users with Subscriber-level access or higher t...
Jun 5, 2024This vulnerability in the RegistrationMagic WordPress plugin allows attackers to bypass form submission limits, enabling functionality misuse. It affe...
Jun 4, 2024This vulnerability in the RegistrationMagic WordPress plugin allows attackers to bypass access controls and modify arbitrary prices in forms. It affec...
Apr 24, 2024This vulnerability allows authenticated attackers with contributor-level access or higher to perform blind SQL injection attacks via the 'id' paramete...
Apr 9, 2024This SQL injection vulnerability in the ProfileGrid WordPress plugin allows attackers with contributor-level access to execute arbitrary SQL commands ...
Mar 28, 2024This vulnerability allows attackers to inject malicious scripts into web pages generated by the RegistrationMagic WordPress plugin. When users visit a...
Mar 19, 2024This vulnerability allows attackers to inject malicious scripts into web pages generated by the RegistrationMagic WordPress plugin. When users visit a...
Feb 1, 2024This SQL injection vulnerability in the RegistrationMagic WordPress plugin allows attackers to execute arbitrary SQL commands through specially crafte...
Dec 28, 2023Unauthenticated reflected cross-site scripting (XSS) vulnerability in EventPrime WordPress plugin allows attackers to inject malicious scripts via cra...
Oct 25, 2023The ProfileGrid WordPress plugin up to version 5.5.1 has a missing capability check that allows authenticated users with subscriber-level permissions ...
Jul 18, 2023This vulnerability allows unauthenticated attackers to inject malicious scripts into EventPrime WordPress plugin pages through reflected cross-site sc...
May 28, 2023This vulnerability allows unauthenticated attackers to bypass authentication in WordPress sites using the RegistrationMagic plugin. By exploiting insu...
May 16, 2023The ProfileGrid WordPress plugin before version 5.3.1 contains an authorization bypass vulnerability in its password reset functionality. This allows ...
Mar 20, 2023This CVE describes a SQL injection vulnerability in the RegistrationMagic WordPress plugin versions before 5.0.1.6. The vulnerability allows attackers...
Jan 10, 2022CVE-2021-4073 is an authentication bypass vulnerability in the RegistrationMagic WordPress plugin that allows unauthenticated attackers to log in as a...
Dec 14, 2021Why Monitor Metagauss Security Vulnerabilities?
Real-time CVE tracking: Our automated system monitors 32+ known vulnerabilities affecting Metagauss products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.
Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Metagauss packages in under 60 seconds. No agents required - completely agentless scanning that works across Metagauss deployments.
Free vulnerability database: Access detailed information about every Metagauss CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.
🚀 Get Started in 60 Seconds
- Register free account & add your servers
- Run one-time scan or schedule automatic monitoring (every 1-24 hours)
- Receive instant alerts when new Metagauss CVEs affect your systems
- Access dashboard with severity breakdown & fix instructions
