ProfileGrid plugin for WordPress vulnerabilities

The ProfileGrid plugin for WordPress is vulnerable to unauthorized decryption of private information in versions up to and including 5.5.0. This is due to the passphrase and iv being hardcoded in the 'pm_encrypt_decrypt_pass' function, allowing authenticated attackers with administrator-level permissions to decrypt and view users' passwords.

The ProfileGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'edit_group' handler in versions up to and including 5.5.2. This allows authenticated attackers with group ownership to update group options, including the 'associate_role' parameter, which defines the member's role.

The ProfileGrid plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'profile_magic_check_smtp_connection' function in versions up to and including 5.5.1. This allows authenticated attackers with subscriber-level permissions or above to arbitrarily update site options.

The ProfileGrid plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'pm_upload_csv' function in versions up to and including 5.5.1. This allows authenticated attackers with subscriber-level permissions or higher to import new users and update existing users.