Lucene search

Membership Security Vulnerabilities

cve

CVE-2015-9372

Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

6.1CVSS

6AI Score

0.001EPSS

2019-08-28 01:15 PM

cve

CVE-2018-6577

SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscriptions request.

9.8CVSS

9.8AI Score

0.003EPSS

2018-02-02 05:29 PM