CVE-2026-12073

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

June 30, 2026

Last Seen

June 30, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Privilege Escalation Vulnerability in ProfileGrid Plugin for WordPress78.0

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is critically vulnerable to privilege escalation via account takeover, affecting all versions up to and including 5.9.9.5. The vulnerability arises from improper validation of the `user_login` parameter on registration form...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Privilege Escalation Vulnerability in ProfileGrid Plugin for WordPress

Jun 30·1 sources

Related Articles (2)

CVE-2026-12073 - ProfileGrid - User Profiles, Groups and Communities <=5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite Latest Vulnerabilities / 13h CVE ID : CVE-2026-12073 Published : June 30, 2026, 5:34 a.m. 31 minutes ago Description : The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.9.9.5. This is due to the plugin not validating a `user_login` o

cvefeed.io·Jun 30

CVE-2026-12073 - Exploits & Severity

Related Entities

Data Breach CWE-287 - Improper Authentication CWE-269 - Improper Privilege Management WordPress