CVE-2025-26999
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Mar 3, 2025
CWE ID 502
Summary
CVE-2025-26999 is a Deserialization of Untrusted Data vulnerability affecting Metagauss ProfileGrid. This issue, which permits Object Injection, poses a risk to versions 5.9.4.3 and earlier of the ProfileGrid software. An attacker can exploit this weakness by sending malicious data to the targeted system, resulting in unintended execution of code and potential unauthorized access. It is crucial for users to update their ProfileGrid software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- ProfileGrid Plugin
Affected Vendors
- WordPress