Extension WordPress
Vulnérabilités ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup, page 2
Cette page rassemble les failles publiées pour ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
22 fiches
ARMember <= 3.4.10 – Missing Access Control leading to Authenticated (Subscriber+) Sensitive Information Disclosure
The ARMember plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ARMember dashboard in versions up to, and including, 3.4.10. This makes it possible for subscriber-level attackers to potentially access the…
*-3.4.10
3.4.11
20/01/2023
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 3.4.7 -Authentication Bypass via Password Reset Weakness
The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users…
*-3.4.7
3.4.8
06/06/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.