Extension WordPress
Vulnérabilités CRM Memberships
Cette page rassemble les failles publiées pour CRM Memberships, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de CRM Memberships
3 fiches
CRM Memberships <= 2.6 – Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint
The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 2.6. This is due to missing authorization and authentication checks on the `ntzcrm_changepassword` AJAX action. This makes…
*-2.6
2.7
04/12/2025
CRM Memberships <= 2.6 – Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX Action
The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the 'ntzcrm_add_new_tag' function in all versions up to, and including, 2.6. This makes it possible for unauthenticated attackers…
*-2.6
2.7
04/12/2025
CRM Memberships <= 2.2 – Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
The CRM Memberships plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in versions up to, and including, 2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-2.2
2.5
24/04/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.