Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions

Güvenlik açıkları

• CVE-2024-37277

  WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability

  Kritik 9.8

• CVE-2024-32794

  WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

  Yüksek 8.8

• CVE-2024-32793

  WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability

  Yüksek 8.8

• CVE-2023-6187

  Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload

  Yüksek 8.8

• CVE-2021-20678

  SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary S

  Yüksek 8.8

• CVE-2024-37486

  WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability

  Yüksek 7.2

• CVE-2021-24979→ 2.6.6

  Paid Memberships Pro < 2.6.6 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2015-5532

  Multiple cross-site scripting (XSS) vulnerabilities in the Paid Memberships Pro (PMPro) plugin before 1.8.4.3 for WordPress allow remote att

  Orta 6.1

• CVE-2024-1407

  Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification

  Orta 5.4

• CVE-2024-0624

  Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update

  Orta 5.3

• CVE-2023-6855

  Paid Memberships Pro <= 2.12.5 - Missing Authorization via API

  Orta 5.3

• CVE-2014-8801

  Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress allows remote attac

  Orta 5.0

• CVE-2024-3215

  Paid Memberships Pro <= 3.0.1 - Cross-Site Request Forgery

  Orta 4.3

• CVE-2024-0588

  Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery

  Orta 4.3

• CVE-2020-36754→ 2.4.3

  Paid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery Bypass

  Orta 4.3