CVE-2024-32793 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32793

CVE-2024-32793 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress Paid Memberships Pro plugin up to version 2.12.10. The CVE description and multiple connected sources identify unauthenticated CSRF that could allow unauthorized actions on behalf of a user, with the NVD l...

CVE-2024-32794 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32794

CVE-2024-32794 affects the WordPress plugin Paid Memberships Pro (versions

CVE-2024-32794 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

CVE-2024-32794 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 2.12.10...

WordPress plugin Paid Memberships Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Paid...

PT-2024-24866 · Unknown · Paid Memberships Pro

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro versions n/a through 2.12.10 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For...

WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Paid Memberships Pro versions = 2.12.10...

WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Paid Memberships Pro versions = 2.12.10...

WordPress Paid Memberships Pro Plugin <= 2.12.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.10 Fixed in 3.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32793 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f812b615b820 Credits Majed Refaea...

WordPress Paid Memberships Pro Plugin <= 2.12.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.10 Fixed in 3.0 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-32794 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e21febb151a2 Credits Joshua Chan Required...

WordPress Paid Memberships Pro plugin <= 3.0.1 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Whit Taylor in WordPress Plugin Paid Memberships Pro versions = 3.0.1...

Paid Memberships Pro < 3.0.2 - Cross-Site Request Forgery

Description The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the pmproupdatelevelgrouporder...

WordPress Paid Memberships Pro Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paid Memberships Pro Type Plugin Vulnerable versions = 3.0.1 Fixed in 3.0.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3215 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 707f90cd781b Credits Whit Taylor...

WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by kodaichodai in WordPress Plugin Paid Memberships Pro versions = 2.12.10...

WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by kodaichodai in WordPress Plugin Paid Memberships Pro versions = 2.12.10...

WordPress Paid Memberships Pro Plugin <= 2.12.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.10 Fixed in 3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-0588 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b53bf462fd91 Credits kodaichodai...

VulnCheck KEV: CVE-2021-25114

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discountcode in one of its REST route available to unauthenticated users before using it in a SQL statement, leading to a SQL injection...

WordPress Paid Memberships Pro Plugin <= 2.12.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Paid Memberships Pro Type Plugin Vulnerable versions = 2.12.10 Fixed in 3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-0588 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6f8ac4a2a197 Credits kodaichodai...