What is the CVSS score of EUVD-2026-50992?

EUVD-2026-50992 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of ProfileGrid are affected by EUVD-2026-50992?

The ProfileGrid WordPress plugin (versions before 5.9.9.8) contains a critical privilege escalation vulnerability that allows unauthenticated attackers to gain administrator-level access by…. A patch is available.

Is there a public PoC exploit available for EUVD-2026-50992?

Yes, a public proof-of-concept exploit is available for EUVD-2026-50992. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate EUVD-2026-50992?

Within 24 hours: Audit all WordPress installations for ProfileGrid plugin presence and version; disable the plugin on any production system if immediate patching is not feasible. Within 7 days: Deploy ProfileGrid version 5.9.9.8 or later across all affected systems and validate plugin functionality in staging before production rollout. Within 30 days: Audit all administrator accounts and group configurations created or modified in the past 90 days for signs of unauthorized escalation; review access logs for anomalous self-registration or group assignment patterns; implement Web Application Firewall rules or additional access controls to restrict group self-registration where business requirements permit.

ProfileGrid EUVD-2026-50992

| CVE-2026-12687 HIGH

Improper Privilege Management (CWE-269)

2026-07-30 WPScan

GHSA-9fxw-6x9j-x2gr

WordPress Privilege Escalation Profilegrid Unknown

7.5

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

10.0 CRITICAL

Unauthenticated network registration with low complexity yields an Administrator account, so full C/I/A impact and S:C as the plugin escalates beyond its own security scope into WordPress core.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 30, 2026 - 14:39 vuln.today

CVSS changed

Jul 30, 2026 - 14:37 NVD

7.5 (HIGH)

Patch available

Jul 30, 2026 - 07:03 EUVD

CVE Published

Jul 30, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 30, 2026 - 06:00 cve.org

HIGH 7.5

DescriptionCVE.org

The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into through its front-end registration, allowing unauthenticated users to register directly into a privileged group and be granted that group's configured role, up to Administrator when such a group exists, leading to privilege escalation.

AnalysisAI

Privilege escalation in the ProfileGrid WordPress plugin before 5.9.9.8 lets unauthenticated visitors self-register into any group through the front-end registration form, inheriting that group's configured WordPress role - up to Administrator where such a group exists. Publicly available exploit code exists (published by WPScan) and a vendor patch is available, though EPSS remains low at 0.15% (4th percentile), indicating limited observed exploitation attempts to date.

Technical ContextAI

ProfileGrid is a WordPress user-profile, membership and group-management plugin that maps its internal 'groups' onto native WordPress roles, so group membership directly governs a user's capabilities. The flaw is a CWE-269 Improper Privilege Management issue: the front-end registration handler trusts a client-supplied group identifier without server-side authorization checks, so it never verifies that an anonymous registrant is permitted to join the requested group. Because ProfileGrid assigns the group's mapped role at registration time, an attacker-chosen group value translates into an arbitrary WordPress role. The CPE cpe:2.3:a:unknown:profilegrid:*:*:*:*:*:*:*:* covers all ProfileGrid installations up to the fixed release.

RemediationAI

Vendor-released patch: upgrade ProfileGrid to version 5.9.9.8 or later, which is the primary and authoritative fix (advisory: https://wpscan.com/vulnerability/e754ef68-40ae-4420-a0b8-6c23a83bc450/). If immediate patching is not possible, the most effective compensating control is to remove or reconfigure any ProfileGrid group that maps to Administrator or other privileged WordPress roles so that no front-end-registerable group grants elevated capabilities - this closes the escalation path at the cost of losing self-service access to those groups. Additionally, disable public/front-end self-registration for privileged groups or gate registration behind manual admin approval, and place the registration endpoint behind a WAF rule that inspects and restricts the submitted group parameter; note these controls reduce but do not fully eliminate exposure and should be treated as temporary until the upgrade is applied. After patching, audit existing users for unexpected administrator or elevated-role accounts created via registration.