Skip to content
OpenAdvisories

Vendor

WpIndeed

5 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3

    Indeed Membership Pro 7.3 - 8.6 - Missing Authorization Checks

    The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions in versions 7.3 - 8.6. This makes it possible for authenticated attacker, with minimal permission, such as a subscrib…

  • Medium 5.9

    WordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions.