← volver
CVE-2022-45083

WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection

CVSS 6.6 MEDIUMEPSS 0.6%CWE-502
Deserialization of Untrusted Data vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress: from n/a through 4.3.2.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →