Lucene search
+L

94 matches found

CVE
CVE
•added 2026/09/12 6:00 a.m.•34 views

CVE-2026-84099

The wpstorecart WordPress plugin (versions

8.1CVSS6AI score0.00453EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/20 12:16 p.m.•16 views

CVE-2026-74001

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

9.8CVSS0.00606EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/20 12:07 p.m.•73 views

CVE-2026-74001

User Registration & Membership Pro is a WordPress plugin affected by an unauthenticated broken authentication vulnerability in versions ≤ 5.4.5 , enabling account takeover without any prior credentials. The flaw was discovered by 0xd4rk5id3 and carries a CVSS 3.1 score of 9.8 (CRITICAL) with a ne...

9.8CVSS5.8AI score0.00606EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/20 12:07 p.m.•17 views

EUVD-2026-63314

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

9.8CVSS5.2AI score0.00606EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/20 12:07 p.m.•43 views

CVE-2026-74001 WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

9.8CVSS0.00606EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•1 views

CVE-2026-74001: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

9.8CVSS5.7AI score0.00606EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/20 12:00 a.m.•21 views

PT-2026-78987

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

9.8CVSS5.3AI score0.00606EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/08/19 12:05 p.m.•12 views

WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

Account Takeover vulnerability discovered by 0xd4rk5id3 in WordPress Plugin User Registration & Membership Pro versions = 5.4.5...

9.8CVSS5.3AI score0.00606EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/07/21 10:16 a.m.•67 views

CVE-2026-62415

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

9.1CVSS0.00446EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/21 9:19 a.m.•36 views

CVE-2026-62415 Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

0.00446EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/21 9:19 a.m.•25 views

EUVD-2026-46170

The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

9.1CVSS5.3AI score0.00446EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/21 9:19 a.m.•48 views

CVE-2026-62415

The Membership Pro Joomla extension (prior to version 4.6.2 ) is vulnerable to an insecure default configuration . By default, the extension allows unauthenticated users to upload media assets . Exploitation details and specific in-the-wild examples are not provided in the documents. Remediation ...

9.1CVSS5.8AI score0.00446EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/21 9:19 a.m.•17 views

CVE-2026-62415 Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2

The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

5.8AI score0.00446EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/21 9:19 a.m.•13 views

CVE-2026-62415

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

9.1CVSS5.3AI score0.00446EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•4 views

CVE-2026-62415: Initialization of a Resource with an Insecure Default

Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro 4.6.2 - The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

9.1CVSS5.8AI score0.00446EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•30 views

PT-2026-61852

The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

5.3AI score0.00446EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 5:03 p.m.•15 views

CVE-2026-25357

Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ultimate Membership Pro: from n/a through = 13.7...

8.1CVSS5.8AI score0.00342EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•26 views

EUVD-2026-15677

Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ultimate Membership Pro: from n/a through = 13.7...

5.8AI score0.00342EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:16 p.m.•10 views

CVE-2026-25357

Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ultimate Membership Pro: from n/a through = 13.7...

8.1CVSS0.00342EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•47 views

CVE-2026-25357 WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ultimate Membership Pro: from n/a through = 13.7...

8.1CVSS0.00342EPSS
SaveExploits0References1
Rows per page
Query Builder