PT-2024-28869 · Unknown · Kashipara Live Membership System

Name of the Vulnerable Software and Affected Versions: Kashipara Live Membership System version 1.0 Description: An Unrestricted file upload vulnerability was found in "/Membership/edit member.php" of Kashipara Live Membership System, which allows attackers to execute arbitrary code via uploading...

CVE-2024-40486

CVE-2024-40486 affects Kashipara Live Membership System v1.0. The issue is a SQL injection in the "/index.php" page, allowing remote attackers to execute arbitrary SQL and bypass login using the email or password login parameters. Affected component: the Live Membership System’s login entry point...

PT-2024-28873 · Unknown · Kashipara Live Membership System

Name of the Vulnerable Software and Affected Versions: Kashipara Live Membership System version 1.0 Description: A Cross-Site Request Forgery CSRF issue was found in the Kashipara Live Membership System. This could lead to an attacker tricking the administrator into deleting valid member data via...

CVE-2024-40487

A Stored Cross Site Scripting XSS vulnerability was found in "/viewtype.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType parameter...

CVE-2024-40487

A Stored Cross Site Scripting XSS vulnerability was found in "/viewtype.php" of Kashipara Live Membership System v1.0, which allows remote attackers to execute arbitrary code via membershipType parameter...

WordPress Paid Memberships Pro - Membership Maps Add On plugin < 0.7 - Contributor+ Sensitive Information Disclosure vulnerability

WordPress Paid Memberships Pro - Membership Maps Add On plugin 0.7 - Contributor+ Sensitive Information Disclosure vulnerability discovered by Scott Kingsley Clark in WordPress Plugin Pmpro Membership Maps versions 0.7...

CVE-2024-1286

The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site...

CVE-2024-1286

The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site...

CVE-2024-1286 Paid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information Disclosure

The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site...

WordPress Pmpro Membership Maps Plugin < 0.7 is vulnerable to Sensitive Data Exposure

Software Pmpro Membership Maps Type Plugin Vulnerable versions 0.7 Fixed in 0.7 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1286 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a7b3657c40ef Credits Scott Kingsley Clark...

PT-2024-17768 · WordPress · Pmpro-Membership-Maps

Name of the Vulnerable Software and Affected Versions: pmpro-membership-maps versions prior to 0.7 Description: The issue allows users with at least the contributor role to leak sensitive information about users with a membership on the site. This is due to the lack of proper access control in th...

WordPress plugin pmpro-membership-maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin wp-affiliate-platform 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Changing Farms Using the CHFARM Utility

This article provides guidelines and alternate references for the use of Change Farm command CHFARM within a Citrix environment. CHFARM Usage The CHFARM utility is used to change the farm membership of a Citrix Server. Background You can use the command line CHFARM when you want to modify the far...

CVE-2024-37110

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7...

CVE-2024-37110 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7...

CVE-2024-37113 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7...

CVE-2024-37112

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7...

CVE-2024-37112

CVE-2024-37112 is an unauthenticated SQL injection in the WishList Member X WordPress plugin. Affected: WishList Member X

SAMSUNG Mobile devices Authorization Issues Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. An authorization issue vulnerability exists in SAMSUNG Mobile devices prior to version 1.8.17, which stems from an improper authentication issue in...