Skip to content
OpenAdvisories
High · 7.1 CVE-2024-49634 EUVD-2024-43496GHSA-78x6-2j48-rwjh

WordPress BP Member Type Manager plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability

Published Oct 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Rimon Habib Product: BP Member Type Manager

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rimon Habib BP Member Type Manager bp-member-type-manager allows Reflected XSS.This issue affects BP Member Type Manager: from n/a through <= 1.01.

Affected products

VendorProductAffectedFixed
Rimon Habib BP Member Type Manager ≤ 1.01 —

References