6 matches found
CVE-2026-81346: Missing Authorization
The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to delete arbitrary membership plans...
CVE-2025-69931
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2025-69931
The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the /delete_membership.php?id=1 endpoint. This vulnerability, identified as CVE-2025-69931 , stems from the improper neutralization of special elements used in an SQL command. The impact is rated as CRITICAL with a C...
PT-2026-66581
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description An issue exists that allows SQL Injection via the /delete membership.php endpoint through the id variable. SQL Injection is a technique where malicious SQL statements are inserted...
