Browse CVEs

HIGH 7.5 CVE-2024-11299 The Memberpress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.37 via the WordPress … Memberpress after 1.11.37 Fix from $1,9502025-04-22 CRITICAL 9.8 CVE-2024-43956 Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects … Memberpress 1.11.35+ Fix from $2,3002024-11-01 MEDIUM 6.4 CVE-2024-5031 The Memberpress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.11.29 via the 'mepr-u… Memberpress 1.11.30+ Fix from $1,6002024-05-22 MEDIUM 5.4 CVE-2024-5025 The Memberpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arglist’ parameter in all versions up to, and including, 1… Memberpress 1.11.30+ Fix from $1,6002024-05-22 MEDIUM 6.1 CVE-2024-1412 The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘message’ and 'error' parameters in all versions up to, … Memberpress 1.11.27+ Fix from $1,6002024-04-09 MEDIUM 5.4 CVE-2022-0398 The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links… Thirstyaffiliates Affiliate Link Manager 3.10.5+ Fix from $1,6002022-04-25 MEDIUM 5.4 CVE-2021-24127 Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable… Thirstyaffiliates Affiliate Link Manager 3.9.3+ Fix from $1,6002021-03-18 MEDIUM 6.1 CVE-2011-4595 Pretty-Link WordPress plugin 1.5.2 has XSS Prettylinks No fix yet Fix from $1,6002020-01-10 HIGH 7.2 CVE-2015-9457 The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter. Prettylinks 1.6.8+ Fix from $1,9502019-10-10