Read the docs

Caseproof, LLC

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Caseproof, LLC records in CISA KEV

No Caseproof, LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Memberpress 5 records MEDIUM Prettylinks 4 records LOW Thirstyaffiliates Affiliate Link Manager 3 records LOW

Records

5 records in Memberpress · all components

TI-2024-29545 CVE-2024-43956 · GHSA-233m-86jr-5p6c

WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberpress: from n/a through 1.11.34.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00433 Published 2024-11-01 No fix listed CWE-862
TI-2024-04667 CVE-2024-5025 · GHSA-vh53-65cw-j6wx

MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter

Priority LOW 28

The Memberpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arglist’ parameter in all versions up to, and including, 1.11.29 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-05-22 No fix listed CWE-79
TI-2024-01319 CVE-2024-1412 · GHSA-h28q-32f7-jxrv

Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error

Priority LOW 28

The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘message’ and 'error' parameters in all versions up to, and including, 1.11.26 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2024-04-09 No fix listed CWE-79
Open these records in search →