CVE-2021-20678

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2021-20678

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2021-20678

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2021-20678

The CVE-2021-20678 entry concerns the WordPress plugin Paid Memberships Pro, prior to version 2.5.6. A SQL injection flaw allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Impact is data disclosure/modification risk; exploitation details are not prov...

PT-2021-14137 · Unknown · Paid Memberships Pro

Name of the Vulnerable Software and Affected Versions: Paid Memberships Pro versions prior to 2.5.6 Description: The issue allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. This can be exploited by attackers to manipulate database queries, potentiall...

WordPress plugin "Paid Memberships Pro" vulnerable to SQL injection

Overview WordPress Plugin "Paid Memberships Pro" contains an SQL injection vulnerability CWE-89. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC, and...

JVN#08191557: WordPress plugin "Paid Memberships Pro" vulnerable to SQL injection

WordPress Plugin "Paid Memberships Pro" contains an SQL injection vulnerability CWE-89. Impact An attacker who can access Paid Membership Pro may obtain and/or alter the information stored in the database. Solution Update the plugin Update the plugin according to the information provided by the...

WordPress plugin Paid Memberships Pro SQL注入漏洞

WordPress plugin Paid Memberships Pro is an open source application plugin for WordPress. The plugin is designed for premium content sites, clubs/associations, subscription products, newsletters and more. Paid Memberships Pro versions prior to 2.5.6 suffers from a SQL injection vulnerability that...

WordPress Paid Memberships Pro plugin <= 2.5.2 - Insecure Direct Object Reference & sensitive information disclosure vulnerability

Insecure Direct Object Reference & sensitive information disclosure vulnerability found in WordPress Paid Memberships Pro plugin versions = 2.5.2. Solution Update the WordPress Paid Memberships Pro plugin to the latest available version at least 2.5.3...

Azure AD. Attack of the Default Config

Uncloaking dangerous and default configurations within Azure. TL; DR There are several default configurations within the admin portal of Azure. The main affected area is Azure Active Directory Azure AD which is the primary area that controls user authentication, group memberships and privileges...

WordPress Paid Memberships Pro plugin <= 2.5 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by Ron Masas from Checkmarx in WordPress Paid Memberships Pro plugin versions = 2.5. Solution Update the WordPress Paid Memberships Pro plugin to the latest available version at least 2.5.1...

Paid Memberships Pro < 2.5.1 - Authenticated Cross-Site Scripting (XSS)

The Paid Memberships Pro WordPress plugin, versions less than 2.5.1, were affected by an Authenticated Cross-Site Scripting XSS vulnerability in the 'page ' paramater of the Members List page of the dashboard...

WordPress Paid Memberships Pro plugin <= 2.4.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Paid Memberships Pro plugin versions = 2.4.2. Solution Update the WordPress Paid Memberships Pro plugin to the latest available version at least 2.4.3...

CVE-2020-5579

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2020-5579

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2020-5579

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2020-5579

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2020-5579

CVE-2020-5579 concerns the WordPress plugin Paid Memberships Pro (versions prior to 2.3.3). The vulnerability is a SQL injection (CWE-89) that can be exploited by an attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors on the admin-facing interface. Several...