Medium severity · published Jul 16, 2025
CVE-2025-6977
ProfileGrid – User Profiles, Groups and Communities <= 5.9.5.4 - Reflected Cross-Site Scripting via 'pm_get_messenger_notification' function
6.1
CVSS
0.3%
EPSS
No
On KEV
Description
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘pm_get_messenger_notification’ function in all versions up to, and including, 5.9.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a logged-in user into performing an action such as clicking on a link.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
ProfileGrid – User Profiles, Groups and Communities · metagauss
through 5.9.5.4 · source: vendor
PR
Profilegrid · Metagauss
before 5.9.5.5 · source: NVD
Affected product
PU
ProfileGrid – User Profiles, Groups and Communities
metagauss
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-6977
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-6977
Product
https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L1322
Product
https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L1329
Product
https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L1330
Patch
https://plugins.trac.wordpress.org/changeset/3324676/
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/addf264e-e23c-4bb6-a898-0fbb4ec28189?source=cve
More from ProfileGrid – User Profiles, Groups and Communities
9.8
CVE-2026-12073
ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
8.8
CVE-2025-0724
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.5 - Authenticated (Subscriber+) PHP Object Injection
8.8
CVE-2024-6411
ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation
8.8
CVE-2023-3714
ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation
8.8
CVE-2023-3713
ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update