Skip to content
OpenAdvisories

Vendor

azzaroco

13 known vulnerabilities.

Products

WP SuperBackup 5 Ultimate Membership Pro 4 Ultimate Learning Pro 2 Indeed Ultimate Learning Pro 1 Super Backup & Clone - Migrate for WordPress 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2025-64251

    WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbitrary Content Deletion vulnerability

    Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Learning Pro: from n/a through <= 3.9.3.

    azzaroco Ultimate Learning Pro
  • Medium 4.9
    CVE-2024-13846

    Indeed Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameter

    The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparatio…

    azzaroco Indeed Ultimate Learning Pro Web / CMS