CVE-2023-39990

CVE-2023-39990 affects the WordPress plugin Paid Memberships Pro (versions n/a–1.2.3). The issue is a Missing/Broken Authorization vulnerability (Broken Access Control) stemming from missing authorization checks. Public references indicate a fix was released in version 1.2.4. Depending on source,...

WordPress Paid Memberships Pro Plugin <= 1.2.3 is vulnerable to Broken Access Control

Software Paid Memberships Pro Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-39990 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID bcc25db021d7 Credits Rafie Muhammad Patchstac...