Aller au contenu
en Se connecter
8.1 Élevée

CVE-2026-10820 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress…

Description

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin before 4.16.17 does not verify that the user performing a subscription action owns the targeted subscription, allowing any authenticated user (Subscriber+) to cancel other users' active subscriptions via an Insecure Direct Object Reference.

Produits et versions touchés

Produit Versions touchées Corrigé en
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content 4.16 premières → < 4.16.17 4.16.17

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content

Les 7 CVE de Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content →
CVE-2026-12497 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress… 7.5 Élevée CVE-2024-13120 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress… 4.8 Moyenne CVE-2024-13121 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress… 3.5 Faible CVE-2024-13119 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress… 4.8 Moyenne
Suivre cette CVE