Skip to content
OpenAdvisories

Vendor

Prism IT Systems

4 known vulnerabilities.

Products

User Rights Access Manager 2 Multilevel Referral Plugin for WooCommerce 1 Multilevel Referral Affiliate Plugin for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-13750

    Multilevel Referral Affiliate Plugin for WooCommerce <= 2.28 - Authenticated (Subscriber+) SQL Injection

    The Multilevel Referral Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.28 due to insufficient escaping on the user supplied parameter and lack of suffici…

    Prism IT Systems Multilevel Referral Plugin for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2024-37209

    WordPress User Rights Access Manager plugin <= 1.1.2 - Broken Access Control vulnerability

    Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through 1.1.2.

    Prism IT Systems User Rights Access Manager
  • Medium 5.8
    CVE-2024-31122

    WordPress User Rights Access Manager plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism IT Systems User Rights Access Manager allows Reflected XSS.This issue affects User Rights Access Manager: from n/a through 1.1.2.

    Prism IT Systems User Rights Access Manager