Approved changes feed: RSS · Atom

cpe:2.3:a:mikado-themes:biagiotti_membership:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMikado Themes (c88f4c78-7d0e-58dc-bc64-066240193f55)
ProductBiagiotti Membership (51f8ae3a-d5ad-53f1-9053-70d885666dc6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12287 vulnerable 2026-06-03 14:54:16.049730 Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user
CRITICAL (9.8)
The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, such as administrators, granted they have access to an email.
Published: 2024-12-18T07:02:45.373Z
Updated: 2026-04-08T16:36:32.486Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.