Imperva Customers are Protected Against New SQL Injection Vulnerability in WordPress Plugin

A critical security flaw, identified as CVE-2024-1071, was discovered in the Ultimate Member plugin for WordPress, affecting over 200,000 active installations. This vulnerability has a high severity CVSS score of 9.8 and allows for SQL injection via the sorting parameter due to insufficient input...

Exploit for SQL Injection in Ultimatemember Ultimate_Member

CVE-2024-1071 Ultimate Member Unauthorized Database Access...

WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

A critical security flaw has been disclosed in a popular WordPress plugin called Ultimate Member that has more than 200,000 active installations. The vulnerability, tracked as CVE-2024-1071, carries a CVSS score of 9.8 out of a maximum of 10. Security researcher Christiaan Swiers has been credite...

WordPress Ultimate Member Plugin 2.1.3-2.8.2 is vulnerable to SQL Injection

Software Ultimate Member Type Plugin Vulnerable versions 2.1.3-2.8.2 Fixed in 2.8.3 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-1071 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID d52d7ae096c8 Credits Christiaan Swiers Required privilege...

WordPress Ultimate Member SQL Injection (CVE-2024-1071)

The Ultimate Member plugin for WordPress up to version 2.8.2 is vulnerable to SQL injection via the 'sorting' parameter. This allows unauthenticated attackers to exploit blind SQL injections and extract sensitive information from the database. Module Options msf use...

CVE-2023-1071

creationtimestamp| type| source ---|---|--- 2023-04-06 00:26:31+00:00| seen| https://t.me/cibsecurity/61507...

CVE-2023-1071

An issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. Due to improper permissions checks it was possible for an unauthorised user to remove an issue from an epic...

CVE-2023-1071

CVE-2023-1071 affects GitLab versions 15.5–15.8.5, 15.9–15.9.4, and 15.10–15.10.1. Root cause: improper permissions checks allow an unauthorised user to remove an issue from an epic. The connected documents confirm the affected version ranges and the action enabled by the permission flaw; exploit...

CVE-2023-1071

Removed by vendor...

SUSE CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

RHEL 8 : openssl (RHSA-2022:1071)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1071 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

CVE-2022-1071

creationtimestamp| type| source ---|---|--- 2022-03-26 06:36:39+00:00| seen| https://t.me/cibsecurity/39585...

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071 User after free in mrb_vm_exec in mruby/mruby

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071 User after free in mrb_vm_exec in mruby/mruby

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-1071

CVE-2022-1071 affects mruby/mruby prior to 3.2. The issue is a use-after-free in mrb_vm_exec, as documented in multiple sources (e.g., NVD/NIST entry). CVSSv3.1/base scores indicate HIGH severity (8.2) with LOCAL exploitability, low privileges required, UI interaction required, and CHANGED scope,...

SUSE SLES11 Security Update : zsh (SUSE-SU-2022:14910-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14910-1 advisory. - zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment instead of treating them as...

SUSE: Security Advisory (SUSE-SU-2022:14910-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...