Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: e-plugins Component: Wp Membership Clear all filters
TI-2020-18858 CVE-2020-36666 · GHSA-p88j-jqx4-pp79

Multiple e-plugins - Subscriber+ Privilege Escalation

Priority HIGH 73

The directory-pro WordPress plugin before 1.9.5, final-user-wp-frontend-user-profiles WordPress plugin before 1.2.2, producer-retailer WordPress plugin through TODO, photographer-directory WordPress plugin before 1.0.9,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00905 Published 2023-03-27 Fixed in 1.9.5, 1.2.2 +8
TI-2015-03406 CVE-2015-4039 · GHSA-4qcm-8mvw-f49h

Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for…

Priority LOW 30

Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via unspecified (1) profile fields or (2) new po…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02793 Published 2020-01-06 No fix listed CWE-79