CVE-2026-12073 Privilege escalation in ProfileGrid – User Profiles, Groups and Communities
Unauthenticated attackers can overwrite the administrator's email to reset their password and gain administrative access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-12073?
CVE-2026-12073 is a critical vulnerability in metagauss ProfileGrid – User Profiles, Groups and Communities, published on 30 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.9.9.5. This is due to the plugin not validating a `user_login` on registration forms that don't contain this parameter, and not properly handling the error messages. This makes it possible for unauthenticated attackers to change email address of user account with ID=1 (usually an administrator), and leverage that to reset the user's password and gain access to their account.
Weakness: CWE-639
Which versions are affected by CVE-2026-12073?
How do I fix CVE-2026-12073?
No fix has been published for CVE-2026-12073 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-12073 being exploited?
There is no known exploitation of CVE-2026-12073 in the wild and no public exploit code.
Sources
Also known as GHSA-5949-6pq3-mp7g.