CVE-2024-37277
WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4.
Reserved 2024-06-04 | Published 2024-11-01 | Updated 2024-11-01 | Assigner PatchstackCWE-639 Authorization Bypass Through User-Controlled Key
Rafie Muhammad (Patchstack)
patchstack.com/...insecure-direct-object-references-idor-vulnerability?_s_id=cve
Support options
