Skip to content
OpenAdvisories

Product · WpIndeed

Indeed Membership Pro

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    Indeed Membership Pro 7.3 - 8.6 - Missing Authorization Checks

    The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions in versions 7.3 - 8.6. This makes it possible for authenticated attacker, with minimal permission, such as a subscrib…