7.5
Élevée
CVE-2024-37277 Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality…
Description
Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Paid Memberships Pro 3.0 | premières → 3.0.4 | Pas de correctif indiqué |
| paid_memberships_pro 3.0 | premières → 3.0.4 | Pas de correctif indiqué |
Autres CVE de Paid Memberships Pro
Les 5 CVE de Paid Memberships Pro →
CVE-2024-37486
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships…
7.6
Élevée
CVE-2023-39990
Missing Authorization vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through…
5.4
Moyenne
CVE-2024-32793
Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from…
5.4
Moyenne
CVE-2024-32794
Cross-Site Request Forgery (CSRF) vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from…
4.3
Moyenne