CVE-2024-3215

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the pmproupdatelevelgrouporder function. Th...

PT-2024-24446 · WordPress · Paid Memberships Pro

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress versions up to, and including, 3.0.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce...

WordPress plugin Paid Memberships Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-32793

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32794

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32793 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32793 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32793 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32793

CVE-2024-32793 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress Paid Memberships Pro plugin up to version 2.12.10. The CVE description and multiple connected sources identify unauthenticated CSRF that could allow unauthorized actions on behalf of a user, with the NVD l...

CVE-2024-32794 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32794 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32794

CVE-2024-32794 affects the WordPress plugin Paid Memberships Pro (versions

CVE-2024-32794 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

WordPress plugin Paid Memberships Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Paid...

PT-2024-24866 · Unknown · Paid Memberships Pro

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro versions n/a through 2.12.10 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For...

WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Paid Memberships Pro versions = 2.12.10...

WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Paid Memberships Pro versions = 2.12.10...

WordPress Paid Memberships Pro Plugin <= 2.12.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.10 Fixed in 3.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32793 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f812b615b820 Credits Majed Refaea...

WordPress Paid Memberships Pro Plugin <= 2.12.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.10 Fixed in 3.0 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-32794 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e21febb151a2 Credits Joshua Chan Required...

WordPress Paid Memberships Pro plugin <= 3.0.1 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Whit Taylor in WordPress Plugin Paid Memberships Pro versions = 3.0.1...