CVE-2024-1071criticalexploração observada

CVE-2024-1071: falha crítica em ultimatemember Ultimate Member – User Profile…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

100Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actcvss 9.8epss 89%
da publicação à armano mesmo dia
Publicada no NVD13 de mar.
1ª PoC27 de fev.
metasploit10 de fev.
VulnCheck23 de fev.
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
ultimatemember · Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — ultimatemember Ultimate Member – User Profile…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-2123HIGHUltimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site ScriptingEPSS 26.7%CVE-2022-3383HIGHUltimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-SelectEPSS 3.1%CVE-2022-3384HIGHUltimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_optionsEPSS 3.1%CVE-2022-3361MEDIUMUltimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via ShortcodesEPSS 2.6%CVE-2022-1208MEDIUMUltimate Member <= 2.3.2 - Stored Cross-Site ScriptingEPSS 0.9%CVE-2022-1209MEDIUMUltimate Member <= 2.3.1 - Arbitrary RedirectEPSS 0.7%