Ultimate Membership Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:wpindeed:ultimate_membership_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wpindeed (1faa2b8c-4d20-509c-974e-dbcdf51266ee) |
|---|---|
| Product | Ultimate Membership Pro (a5a1927a-5352-5210-85ed-295f54bb9386) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wpindeeddev/ultimatemembershippro |
purl2cpe | 2026-06-01 10:15:34.276855 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-43240 |
vulnerable | 2026-06-08 06:45:49.929722 |
WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability
CRITICAL (9.4)
Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.
Published: 2024-08-19T17:07:00.787Z
Updated: 2026-04-28T16:10:10.124Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36832 |
vulnerable | 2026-06-08 05:25:49.626394 |
Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass
CRITICAL (9.8)
The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user ID.
Published: 2024-10-16T06:43:38.406Z
Updated: 2024-10-16T18:03:20.662Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.