All products

groups

WordPress · Plugin
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Groups <= 4.6.0 - Authenticated (Subscriber+) Privilege Escalation via 'groups_join' ShortcodeCVE-2026-77203 groups WordPress High Fix reported
Groups <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'groups_group_info' ShortcodeCVE-2026-0549 groups WordPress Medium Fix reported
Groups <= 3.7.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Group JoinCVE-2025-11748 groups WordPress Medium Fix reported