CyberRota Analysis
AI-GeneratedThe ProfileGrid WordPress plugin prior to version 5.9.9.7 is vulnerable due to inadequate capability checks on license management actions, allowing authenticated users with Subscriber-level access and higher to modify premium license settings. This could lead to unauthorized changes that may affect site functionality and premium features. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential misuse.
Original NVD Description
The ProfileGrid WordPress plugin before 5.9.9.7 does not perform a capability check on its license management actions, relying only on a nonce that is exposed to any logged-in user, allowing authenticated users with Subscriber-level access and above to overwrite the site's premium license settings.