CVE-2026-16289Disclosure

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

Back to dashboard

0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew45d
Disclosure
CVE-2026-16289 The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authenticated … https://www.cve.org/CVERecord?id=CVE-2026-16289
Post summary
This announcement discloses a privilege‑escalation flaw in ProfileGrid WordPress plugin prior to version 6.0.0.0, where missing auth checks allow any authenticated user to list pending membership requests.
00021986
58.1K followersView on X
Infoflowcloud@infoflowcloud45d
Disclosure
🚨*CVE* CVE-2026-16289 The ProfileGrid WordPress plugin before 6.0.0.0 does not perform authorization checks when listing a group's pending membership requests, allowing any authenticated … https://www.cve.org/CVERecord?id=CVE-2026-16289 ----- Traducción: CVE-2026-16289 El … http://infoflow.cloud`
Post summary
CVE‑2026‑16289 is a ProfileGrid WordPress plugin flaw that permits authenticated users to bypass authorization when viewing pending membership requests; a patch is available in version 6.0.0.0.
0000032
96 followersView on X

Explore more

Back to dashboard