Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-43242

WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Azzaroco Wpindeed
Products
Ultimate Membership Pro Ultimate Membership Pro
CVE-2024-43240

WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability

Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Wpindeed
Products
Ultimate Membership Pro
CVE-2020-36832

Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass

The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user ID.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Wpindeed
Products
Ultimate Membership Pro