7.6
High
CVE-2024-37486 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 3.0.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Paid Memberships Pro 3.0 | earliest → 3.0.5 | No fix stated |
Other CVEs of Paid Memberships Pro
The 5 CVEs of Paid Memberships Pro →
CVE-2024-37277
Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality…
7.5
High
CVE-2023-39990
Missing Authorization vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through…
5.4
Medium
CVE-2024-32793
Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from…
5.4
Medium
CVE-2024-32794
Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from…
4.3
Medium