286 matches found
CVE-2024-32948 WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability
Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28...
WordPress plugin ARMember 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-24995 · Repute Infosystems · Armember
Name of the Vulnerable Software and Affected Versions: Repute Infosystems ARMember versions 4.0.28 and earlier Description: The issue is related to a Missing Authorization vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...
WordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Kursat Cetin Patchstack in WordPress Plugin ARMember versions = 4.0.28...
WordPress ARMember Plugin <= 4.0.28 is vulnerable to Broken Access Control
Software ARMember Type Plugin Vulnerable versions = 4.0.28 Fixed in 4.0.29 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32948 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID c0512654aaef Credits luc Required privilege...
WordPress ARMember plugin <= 4.0.27 - Directory Traversal via X-FILENAME vulnerability
Directory Traversal via X-FILENAME vulnerability discovered by Lucio Sá in WordPress Plugin ARMember versions = 4.0.27...
CVE-2024-30223
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-30223
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-30222
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-30222
CVE-2024-30222 affects ARMember WordPress plugin versions
CVE-2024-30222 WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-30222 WordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-30223 WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-30223 WordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.26...
CVE-2024-30223
CVE-2024-30223 affects the WordPress ARMember plugin up to version 4.0.26, caused by unauthenticated PHP Object Injection via deserialization of untrusted input. Affected component: ARMember (WordPress plugin). Root cause: deserialization of untrusted data leading to PHP object injection. Impact ...
WordPress Plugin ARMember 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
WordPress Plugin ARMember 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
PT-2024-23268 · Armember · Armember
Name of the Vulnerable Software and Affected Versions: ARMember versions n/a through 4.0.26 Description: The issue is related to the deserialization of untrusted data. This is a type of vulnerability where an application accepts data from an untrusted source and deserializes it, potentially...
PT-2024-23267 · Armember · Armember
Name of the Vulnerable Software and Affected Versions: ARMember versions 4.0.26 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks. There is no information provided about the estimated number of potentially affected...
WordPress ARMember Plugin <= 4.0.26 is vulnerable to PHP Object Injection
Software ARMember Type Plugin Vulnerable versions = 4.0.26 Fixed in 4.0.27 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-30223 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 8d16e0b0481c Credits LVT-tholv2k Required privilege Unauthenticated...