CyberRota Analysis
AI-GeneratedThe ProfileGrid WordPress plugin prior to version 5.9.9.7 is vulnerable due to its failure to verify PayPal IPN notifications, enabling unauthenticated attackers to manipulate payment notifications and grant unauthorized paid group memberships. This could lead to unauthorized access to premium content or features, potentially impacting site integrity and user trust. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before granting paid group membership, allowing unauthenticated attackers to forge a payment notification and mark any user as a paid member of any group without any payment being made.