Extension WordPress

Vulnérabilités Restrict User Access – Ultimate Membership & Content Protection

Cette page rassemble les failles publiées pour Restrict User Access – Ultimate Membership & Content Protection, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
6,3CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Restrict User Access – Ultimate Membership & Content Protection

3 fiches

CVE-2024-29138 Moyenne · 6,1
Restrict User Access – Ultimate Membership & Content Protection

Restrict User Access – Membership Plugin with Force <= 2.5 – Reflected Cross-Site Scripting

The Restrict User Access – Membership Plugin with Force plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for…

Versions affectées

*-2.5

Correctif

2.6

Publication

18/03/2024

CVE-2024-0687 Moyenne · 5,3
Restrict User Access – Ultimate Membership & Content Protection

Restrict User Access – Ultimate Membership & Content Protection <= 2.5 – Information Exposure

The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the…

Versions affectées

*-2.5

Correctif

2.6

Publication

26/02/2024

CVE-2022-4974 Moyenne · 6,3
Restrict User Access – Ultimate Membership & Content Protection

Freemius SDK <= 2.4.2 – Missing Authorization Checks

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions…

Versions affectées

[*, 2.2.2)

Correctif

2.2.2

Publication

04/03/2022

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités