WordPress Paid Memberships Pro Vulnerabilities
Wordpress Paid Memberships Pro vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Authorization Bypass Through User-Controlled Key Vulnerability
CVE-2024-37277WordPressPaid Memberships Pro9.8CRITICALMissing Authorization vulnerability Affects Paid Memberships Pro
CVE-2023-39990WordPressPaid Memberships Pro8.8HIGHPaid Memberships Pro CCBill Gateway Vulnerable to Missing Authorization
CVE-2023-40608WordPressPaid Memberships Pro C...8.2HIGHCross-Site Request Forgery Vulnerability in Paid Memberships Pro
CVE-2024-1407WordpressPaid Memberships Pro –...5.4MEDIUMCross-Site Request Forgery Vulnerability in Paid Memberships Pro Plugin
CVE-2024-3215WordpressPaid Memberships Pro –...4.3MEDIUMCross-Site Request Forgery Vulnerability in Paid Memberships Pro Plugin for WordPress
CVE-2024-0588WordpressPaid Memberships Pro –...👾🟡EPSS 11%4.3MEDIUMInsertion of Sensitive Information into Log File Vulnerability
CVE-2024-30514WordPressPaid Memberships Pro –...5.3MEDIUMPlugin Leaks Sensitive Metadata for Other Users
CVE-2024-1279WordpressPaid Memberships Pro👾🟡4.3MEDIUMCross-Site Request Forgery in Paid Memberships Pro Plugin for WordPress
CVE-2024-0624WordpressPaid Memberships Pro –...👾🟡5.3MEDIUMUnauthenticated Membership Level Modification in Paid Memberships Pro Plugin for WordPress
CVE-2023-6855WordPressPaid Memberships Pro –...5.3MEDIUMArbitrary File Upload Vulnerability in Paid Memberships Pro Plugin for WordPress
CVE-2023-6187WordpressPaid Memberships Pro –...EPSS 19%8.8HIGHCross-Site Request Forgery in Paid Memberships Pro Plugin for WordPress
CVE-2020-36754WordpressPaid Memberships Pro –...4.3MEDIUMPaid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection
CVE-2023-0631WordpressPaid Memberships Pro👾🟡EPSS 80%8.8HIGHPaid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode
CVE-2022-4830WordpressPaid Memberships ProEPSS 18%5.4MEDIUMCustom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode
CVE-2022-4831WordpressCustom User Profile Fi...👾🟡5.4MEDIUMUnauthenticated SQL Injection in Paid Memberships Pro Plugin for WordPress
CVE-2023-23488WordpressPaid Memberships Pro W...👾🟡EPSS 80%9.8CRITICALPaid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection
CVE-2021-25114WordpressPaid Memberships ProEPSS 79%9.8CRITICALPaid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting
CVE-2021-24979WordpressPaid Memberships Pro6.1MEDIUMSQL Injection Vulnerability in Paid Memberships Pro Plugin by WordPress
CVE-2021-20678WordPressPaid Memberships Pro8.8HIGHCross-Site Scripting Vulnerabilities in Paid Memberships Pro Plugin for WordPress
CVE-2015-5532WordpressPaid Memberships Pro6.1MEDIUMDirectory Traversal Vulnerability in Paid Memberships Pro Plugin for WordPress
CVE-2014-8801WordpressPaid Memberships ProEPSS 30%