How many CVEs does Metagauss have?

Metagauss has 153 published CVE records since 2019, including 60 in the last two years.

How many Metagauss CVEs are in CISA KEV?

None of Metagauss's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Metagauss products have the most CVEs?

The Metagauss products with the most published CVEs are ProfileGrid, RegistrationMagic, EventPrime, ProfileGrid – User Profiles, Groups and Communities, EventPrime – Events Calendar, Bookings and Tickets.

What are the most common weakness types in Metagauss CVEs?

Metagauss's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)).

Are there public exploits for Metagauss vulnerabilities?

Yes — 18 of Metagauss's CVEs have a known public exploit.

How many critical Metagauss vulnerabilities are there?

Metagauss has 11 critical and 63 high-severity CVEs.

What is the average severity of Metagauss CVEs?

The average CVSS base score across Metagauss's scored CVEs is 6.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

153 CVEs

Metagauss Vulnerabilities

Name: Metagauss vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Metagauss.

153

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

18

Public exploits

PoC or exploit code

6.8

Avg CVSS

2019–2026

Overview

Metagauss has 153 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 18 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Metagauss products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Metagauss's vulnerability posture, as a share of its 153 published CVEs.

Average CVSS: 6.8
Critical / high: 48%
Actively exploited (KEV): 0%
Public exploit available: 12%
Patch available: 95%

Severity and exploitation

How the CVSS severity of Metagauss's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical11

High63

Medium79

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Metagauss's CVEs are currently listed in CISA's KEV catalog.

Public exploits

18

18 of Metagauss's CVEs have a known public exploit available.

Most affected products

The Metagauss products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Metagauss CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Metagauss CVE records.

Disclosure activity by year

How many Metagauss CVEs were published each year.

2019

1

2020

7

2021

2

2022

8

2023

22

2024

53

2025

28

2026

32

Latest Metagauss CVEs

The most recently disclosed vulnerabilities affecting Metagauss.

WordPress ProfileGrid plugin <= 5.9.9.6 - Broken Authentication vulnerability
CWE-288
High · CVSS 7.5
EPSS 0.3%2026-07-13
EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter
CWE-79
High · CVSS 7.2
EPSS 0.2%2026-07-09
Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation
CWE-862
Medium · CVSS 4.3
EPSS 0.2%2026-07-09
WordPress ProfileGrid plugin <= 5.9.9.7 - CSRF to Account Takeover vulnerability
CWE-352
High · CVSS 8.8
EPSS 0.1%2026-07-02
RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter
CWE-352
High · CVSS 8.8
EPSS 0.2%2026-07-01
ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
CWE-639
Critical · CVSS 9.8
EPSS 0.3%2026-06-30
RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request
CWE-345
Medium · CVSS 5.3
EPSS 0.2%2026-06-27
ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
CWE-79
Medium · CVSS 6.4
EPSS 0.2%2026-06-23
WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability
CWE-288
Critical · CVSS 9.8
EPSS 0.4%2026-06-15
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining
CWE-862
High · CVSS 7.1
EPSS 0.2%2026-05-13
ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Group Settings Modification
CWE-862
Medium · CVSS 4.3
EPSS 0.2%2026-05-13
ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter
CWE-89
Medium · CVSS 6.5
EPSS 0.3%2026-05-13

Track new Metagauss CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Metagauss CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

spring-projects154 CVEs CODESYS154 CVEs Dolibarr152 CVEs Squid Cache152 CVEs WPDeveloper152 CVEs chamilo151 CVEs mandrakesoft151 CVEs Prestashop151 CVEs

Browse all vendors

Frequently asked questions

Common questions about Metagauss vulnerabilities.

How many CVEs does Metagauss have?: Metagauss has 153 published CVE records since 2019, including 60 in the last two years.
How many Metagauss CVEs are in CISA KEV?: None of Metagauss's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Metagauss products have the most CVEs?: The Metagauss products with the most published CVEs are ProfileGrid, RegistrationMagic, EventPrime, ProfileGrid – User Profiles, Groups and Communities, EventPrime – Events Calendar, Bookings and Tickets.
What are the most common weakness types in Metagauss CVEs?: Metagauss's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)).
Are there public exploits for Metagauss vulnerabilities?: Yes — 18 of Metagauss's CVEs have a known public exploit.
How many critical Metagauss vulnerabilities are there?: Metagauss has 11 critical and 63 high-severity CVEs.
What is the average severity of Metagauss CVEs?: The average CVSS base score across Metagauss's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Metagauss vulnerabilities

Monitor new Metagauss vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing