Critical · 9.8 CVE-2023-51476 EUVD-2023-56189GHSA-pjq8-j3mp-fhvg

WordPress WP MLM Unilevel plugin <= 4.0 - Unauthenticated Account Takeover vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Privilege Management vulnerability in IOSS WP MLM Unilevel allows Privilege Escalation.This issue affects WP MLM Unilevel: from n/a through 4.0.

Affected products

Vendor	Product	Affected	Fixed
IOSS	WP MLM Unilevel	≤ 4.0	—

References

https://patchstack.com/database/vulnerability/wp-mlm/wordpress-wp-mlm-unilevel-plugin-4-0-unauthenticated-account-takeover-vulnerability?_s_id=cve vdb-entry