Skip to content
OpenAdvisories

Vendor

cbutlerjr

15 known vulnerabilities.

Products

WP-Members Membership Plugin 15
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2024-1852

    WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting

    The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the X-Forwarded-For header in all versions up to, and including, 3.4.9.2 due to insufficient input sanitization and output escaping. This makes it possible …

    cbutlerjr WP-Members Membership Plugin Web / CMS