4.8
Moyenne
CVE-2024-10517 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress…
Description
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.15.15 does not sanitise and escape some of its Drag & Drop Builder fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content 4.15 | premières → < 4.15.15 | 4.15.15 |
Références
- wpscan.com wpscan.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content
Les 7 CVE de Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content →
CVE-2026-12497
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress…
7.5
Élevée
CVE-2026-10820
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress…
8.1
Élevée
CVE-2024-13120
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress…
4.8
Moyenne
CVE-2024-13121
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress…
3.5
Faible