CVE-2025-13416 | ProfileGrid Plugin up to 5.9.7.2 on WordPress pm_deactivate_user_from_group authorization

A vulnerability was found in ProfileGrid Plugin up to 5.9.7.2 on WordPress. It has been rated as problematic. Affected by this issue is the function pm_deactivate_user_from_group. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2025-13416. The attack is possible to be carried out remotely. No exploit exists.