CVE-2024-13741: CWE-918 Server-Side Request Forgery (SSRF) in metagauss ProfileGrid – User Profiles, Groups and Communities
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pm_upload_image function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to download and view images, as well as validating if a non-image file exists, both on local or remote hosts.
AI Analysis
Technical Summary
The ProfileGrid WordPress plugin contains a limited SSRF vulnerability (CWE-918) in the pm_upload_image function affecting all versions up to 5.9.4.2. Authenticated users with low privileges (Subscriber and above) can abuse this flaw to cause the server to make HTTP requests to arbitrary URLs. This can be used to retrieve images or verify the presence of files on internal or external systems. The vulnerability does not require user interaction beyond authentication and has a medium impact on confidentiality and integrity but no impact on availability. No patch or official fix has been documented at this time.
Potential Impact
An attacker with Subscriber-level access can leverage this SSRF vulnerability to make the server perform arbitrary HTTP requests. This can lead to unauthorized information disclosure by downloading images or confirming file existence on internal or external systems. The vulnerability impacts confidentiality and integrity to a limited extent but does not affect system availability. There are no reports of active exploitation in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict Subscriber-level user capabilities if possible and monitor for suspicious activity related to the pm_upload_image function. Avoid exposing sensitive internal resources accessible from the web server. Follow updates from the metagauss vendor for patch availability.
CVE-2024-13741: CWE-918 Server-Side Request Forgery (SSRF) in metagauss ProfileGrid – User Profiles, Groups and Communities
Description
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Limited Server-Side Request Forgery in all versions up to, and including, 5.9.4.2 via the pm_upload_image function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to download and view images, as well as validating if a non-image file exists, both on local or remote hosts.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The ProfileGrid WordPress plugin contains a limited SSRF vulnerability (CWE-918) in the pm_upload_image function affecting all versions up to 5.9.4.2. Authenticated users with low privileges (Subscriber and above) can abuse this flaw to cause the server to make HTTP requests to arbitrary URLs. This can be used to retrieve images or verify the presence of files on internal or external systems. The vulnerability does not require user interaction beyond authentication and has a medium impact on confidentiality and integrity but no impact on availability. No patch or official fix has been documented at this time.
Potential Impact
An attacker with Subscriber-level access can leverage this SSRF vulnerability to make the server perform arbitrary HTTP requests. This can lead to unauthorized information disclosure by downloading images or confirming file existence on internal or external systems. The vulnerability impacts confidentiality and integrity to a limited extent but does not affect system availability. There are no reports of active exploitation in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict Subscriber-level user capabilities if possible and monitor for suspicious activity related to the pm_upload_image function. Avoid exposing sensitive internal resources accessible from the web server. Follow updates from the metagauss vendor for patch availability.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- Wordfence
- Date Reserved
- 2025-01-27T00:29:42.976Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 699f6e6cb7ef31ef0b5a0578
Added to database: 2/25/2026, 9:49:32 PM
Last enriched: 4/9/2026, 1:19:23 PM
Last updated: 4/11/2026, 7:58:12 PM
Views: 35
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.