Membersonic

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Membersonic records in CISA KEV

No Membersonic vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Membersonic · all components

TI-2016-09009 CVE-2016-10971 · GHSA-c64r-qqq2-gp9f

MEDIUM 46

The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01864 Published 2019-09-16 No fix listed CWE-269