7.5
High
CVE-2024-37277 Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality…
Description
Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Paid Memberships Pro 3.0 | earliest → 3.0.4 | No fix stated |
| paid_memberships_pro 3.0 | earliest → 3.0.4 | No fix stated |
Other CVEs of Paid Memberships Pro
The 5 CVEs of Paid Memberships Pro →
CVE-2024-37486
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships…
7.6
High
CVE-2023-39990
Missing Authorization vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through…
5.4
Medium
CVE-2024-32793
Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from…
5.4
Medium
CVE-2024-32794
Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from…
4.3
Medium