CVE-2026-16291 | ProfileGrid Plugin 5.1.1/5.9.4.2/5.9.9.7 on WordPress Notification authorization

A vulnerability was found in ProfileGrid Plugin 5.1.1/5.9.4.2/5.9.9.7 on WordPress. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Notification. Performing a manipulation results in authorization bypass.

This vulnerability is identified as CVE-2026-16291. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.