Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized user suspension due to a missing capability check on the pm_deactivate_user_from_group() function in all versions up to, and including, 5.9.7.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to suspend arbitrary users from groups, including administrators, via the pm_deactivate_user_from_group AJAX action.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-13416 Authenticated User Suspension Vulnerability in ProfileGrid WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13416
Post summary
The text announces CVE‑2025‑13416 as an authenticated user suspension vulnerability in the ProfileGrid WordPress plugin, providing minimal technical classification but no PoC, exploit, or patch details.
CVE-2025-13416 The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized user suspension due to a missing capability check on the pm… https://www.cve.org/CVERecord?id=CVE-2025-13416
Post summary
A CVE-2025-13416 vulnerability is disclosed for the ProfileGrid WordPress plugin, enabling unauthorized user suspension via a missing capability check.