Indeed Membership Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:wpindeed:indeed_membership_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wpindeed (1faa2b8c-4d20-509c-974e-dbcdf51266ee) |
|---|---|
| Product | Indeed Membership Pro (a2dfd1a8-b506-53b3-8a73-20d7eff20959) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36833 |
vulnerable | 2026-06-08 05:25:49.627474 |
Indeed Membership Pro 7.3 - 8.6 - Missing Authorization Checks
MEDIUM (6.3)
The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions in versions 7.3 - 8.6. This makes it possible for authenticated attacker, with minimal permission, such as a subscriber, to perform a variety of actions such as modifying settings and viewing sensitive data.
Published: 2024-10-16T06:43:40.797Z
Updated: 2024-10-16T19:33:16.544Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36832 |
vulnerable | 2026-06-08 05:25:49.627111 |
Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass
CRITICAL (9.8)
The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login as any user, including the site administrator with a default user ID of 1, via the username or user ID.
Published: 2024-10-16T06:43:38.406Z
Updated: 2024-10-16T18:03:20.662Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.