Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress, CVE-2023-50882
- CVE, Research URL
- Published on
- Dec 09, 2024
- Research Description
- Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.13.2.
- Affected versions
-
max 4.13.3.
- Status
-
vulnerable