Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Caseproof, LLC Component: Memberpress Clear all filters
TI-2024-29545 CVE-2024-43956 · GHSA-233m-86jr-5p6c

WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberpress: from n/a through 1.11.34.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00433 Published 2024-11-01 No fix listed CWE-862
TI-2024-04667 CVE-2024-5025 · GHSA-vh53-65cw-j6wx

MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter

Priority LOW 28

The Memberpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arglist’ parameter in all versions up to, and including, 1.11.29 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-05-22 No fix listed CWE-79
TI-2024-01319 CVE-2024-1412 · GHSA-h28q-32f7-jxrv

Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error

Priority LOW 28

The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘message’ and 'error' parameters in all versions up to, and including, 1.11.26 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2024-04-09 No fix listed CWE-79