Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/19 10:11 a.m.18 views

CVE-2025-4610

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpmemusermemberships shortcode in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00344EPSS
Exploits0References1
Circl
Circl
added 2025/05/17 5:1 p.m.20 views

CVE-2025-4610

creationtimestamp| type| source ---|---|--- 2025-05-17 17:01:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpezabvragj2 2025-05-19 20:39:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16928...

6.4CVSS8.7AI score0.00344EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/17 9:22 a.m.7 views

CVE-2025-4610 WP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpmemusermemberships shortcode in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00344EPSS
Exploits0References5
CVE
CVE
added 2025/05/17 9:22 a.m.36 views

CVE-2025-4610

CVE-2025-4610 affects the WP-Members Membership Plugin for WordPress (versions up to and including 3.5.2). The vulnerability is a Stored Cross-Site Scripting (XSS) via the wpmem_user_memberships shortcode caused by insufficient input sanitization and output escaping of user-provided attributes. E...

6.4CVSS5.7AI score0.00344EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/05/17 9:22 a.m.25 views

CVE-2025-4610 WP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpmemusermemberships shortcode in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS0.00344EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/05/16 10:13 p.m.8 views

WordPress WP-Members plugin <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via wpmemusermemberships Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin WP-Members versions = 3.5.2...

6.4CVSS6.3AI score0.00344EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder