Vulnerabilities in Paid Memberships Pro
8 resultsVexday analysis
O Paid Memberships Pro apresenta 8 vulnerabilidades registradas, nenhuma atualmente sob exploração ativa ou com severidade crítica. A fraqueza dominante (CWE-352 - Cross-Site Request Forgery) sugere gaps em validação de requisições, risco típico em plugins web mal dimensionados. Sem movimentação recente no cenário de ataques, o risco é baixo a médio e permite planejamento deliberado de correções.
CVE-2024-37486HIGHWordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerabilityEPSS 0.7%CVE-2024-37277HIGHWordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.7%CVE-2024-30514MEDIUMWordPress Paid Memberships Pro – Payfast Gateway Add On plugin <= 1.4.1 - Sensitive Data Exposure via Log File vulnerabilityEPSS 0.5%CVE-2024-30523MEDIUMWordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2023-39990MEDIUMWordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-40608HIGHWordPress Paid Memberships Pro CCBill Gateway plugin <= 0.3 - Unauthenticated Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-32794MEDIUMWordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-32793MEDIUMWordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%