Skip to content
OpenAdvisories

Vendor

azzaroco

13 known vulnerabilities.

Products

WP SuperBackup 5 Ultimate Membership Pro 4 Ultimate Learning Pro 2 Indeed Ultimate Learning Pro 1 Super Backup & Clone - Migrate for WordPress 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-56064 Public exploit Scanner template EPSS 33%

    WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through <= 2.3.3.

    azzaroco WP SuperBackup
  • Critical 9.8
    CVE-2024-9290 Public exploit

    Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

    The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up to, and including, …

    azzaroco Super Backup & Clone - Migrate for WordPress Web / CMS
  • Critical 9.0
    CVE-2024-43242

    WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

    azzaroco Ultimate Membership Pro
  • Critical 9.4
    CVE-2024-43240

    WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability

    Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

    azzaroco Ultimate Membership Pro