PT-2025-42594

Name of the Vulnerable Software and Affected Versions Binary MLM Plan plugin for WordPress versions up to and including 3.0 Description The Binary MLM Plan plugin for WordPress has an issue where an attacker can view payout summaries of other members. This occurs because the bmp user payout detai...

PT-2025-42277

Name of the Vulnerable Software and Affected Versions Binary MLM Plan plugin for WordPress versions prior to 3.1 Description The Binary MLM Plan plugin for WordPress is susceptible to limited privilege escalation. The bmp user role grants all users with the manage bmp capability by default upon...