WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Simple Membership versions = 4.5.3...

CVE-2024-46236

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the address parameter in addmembers.php and editmember.php...

WordPress Simple Membership Plugin <= 4.5.3 is vulnerable to Open Redirection

Software Simple Membership Type Plugin Vulnerable versions = 4.5.3 Fixed in 4.5.4 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2024-49682 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 0c7afbddabf9 Credits Muhamad Agil Fachrian Required privilege...

CVE-2024-48709

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the membershipType parameter in edittype.php...

CVE-2024-46236

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the address parameter in addmembers.php and editmember.php...

CodeAstro Membership Management System 跨站脚本漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from a cross-site scripting vulnerability in the membership Type parameter of edittype.php...

CVE-2024-48709

CodeAstro Membership Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) via the membershipType parameter in edit_type.php. Affected component: membershipType handling in edit_type.php. Likely impact: injection of script in trusted contexts leading to client-side compromise; explic...

CVE-2024-46236

The CVE-2024-46236 entry concerns CodeAstro Membership Management System v1.0, which is vulnerable to Cross-Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php. Root cause is likely improper sanitization/encoding of user-supplied address input in these scripts, e...

CVE-2024-48709

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the membershipType parameter in edittype.php...

CVE-2024-49226

Deserialization of Untrusted Data vulnerability in taketin TAKETIN To WP Membership taketin-to-wp-membership allows Object Injection.This issue affects TAKETIN To WP Membership: from n/a through = 2.8.17...

CVE-2024-49226 WordPress TAKETIN To WP Membership plugin <= 2.8.17 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in taketin TAKETIN To WP Membership taketin-to-wp-membership allows Object Injection.This issue affects TAKETIN To WP Membership: from n/a through = 2.8.17...

CVE-2024-49226

CVE-2024-49226 affects TAKETIN To WP Membership (WordPress plugin) up to version 2.8.0. It is a PHP Object Injection (Deserialization of Untrusted Data) vulnerability that can enable arbitrary object injection. Impact is described as high in CVSS (8.8, HIGH) with potential for full compromise of ...

CVE-2024-49226 WordPress TAKETIN To WP Membership plugin <= 2.8.17 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in taketin TAKETIN To WP Membership taketin-to-wp-membership allows Object Injection.This issue affects TAKETIN To WP Membership: from n/a through = 2.8.17...

CVE-2020-36832

The CVE-2020-36832 entry concerns the WordPress plugin Ultimate Membership Pro. Affects versions 7.3 through 8.6 (inclusive). The underlying issue is an authentication bypass that enables unauthenticated attackers to log in as any user, including the site administrator (default user ID 1) via use...

CVE-2020-36832 Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass

The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user...

CVE-2020-36832 Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass

The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user...

WordPress plugin Ultimate Membership Pro 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

WordPress plugin Indeed Membership Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin TAKETIN To WP Membership 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

PT-2024-10843 · WordPress · Indeed Membership Pro

Name of the Vulnerable Software and Affected Versions: Indeed Membership Pro plugin for WordPress versions 7.3 through 8.6 Description: The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions. This makes it...