Membership Pro Joomla Plugin Unauthorized Access to Restricted Resources

Based on the provided web page screenshot, here is a summary of the key information regarding the "Membership Pro" vulnerability: Vulnerability Overview Vulnerability Name: Membership Pro - Joomla Membership Subscription Vulnerability Description: The vulnerability involves a Joomla membership subscription extension that allows unauthorized users to access restricted resources (such as paid content). Scope of Impact Affected Versions: Joomla 3.9.0, Joomla 4, Joomla 5, Joomla 6 Last Updated: July 21, 2024 Version: 4.4.2 Remediation Measures Upgrade Version: Upgrade to the latest version to fix the vulnerability. Configuration Check: Ensure that membership subscription plans are correctly configured to restrict access to restricted resources. Use Security Plugins: Utilize Joomla core ACL methods, the SP Page Builder extension, the Membership Pro URLs Restriction plugin, etc., to enhance security. POC Code or Exploit Code No POC Code: No specific POC code or exploit code was provided on the page. Other Key Features Sell Subscription Plans: Supports free and paid subscription plans, including subscription expiration, one-time subscriptions, trial memberships, renewal options, and upgrade options. Restricted Resource Access: Restricts access to restricted resources through Joomla core ACL methods, the SP Page Builder extension, the Membership Pro URLs Restriction plugin, etc. Powerful Custom Fields: Supports various field types, which can be assigned to one or more subscription plans, and supports conditional fields and custom fee fields. Joomla User Group Integration: Assigns subscribers to specific user groups to control access based on user groups. Easy-to-Manage Subscriptions: Supports adding, modifying, deleting, viewing, approving/publishing, renewing, cancelling, exporting/importing, and bulk coupon generation functions. Beautiful, Clean, Responsive Layout: Supports various frontend frameworks and layout options. Flexible Coupon System: Supports fixed amount or percentage discounts, which can be assigned to one or more subscription plans. Support for 50+ Payment Gateways: Supports various payment gateways, including PayPal, Authorize.net, Stripe, etc. Powerful Email Notification System: Supports email notifications for administrators and subscribers. Group Membership: Allows one person to subscribe for an entire group. Smart Multilingual: Supports multilingual websites. Synchronize Profile Data: Supports synchronization with Joomla user profiles, user custom fields, and third-party extensions. Nested Categories: Supports unlimited categories and subcategories. Invoice PDF: Generates and sends professional, customizable PDF invoices. Translation: Easily find, translate, and change language items. Execute PHP Code: Execute custom PHP code. Limit Subscriptions: Limits the number of subscriptions that can be purchased. Membership Cards: Generates and allows the download of membership cards. Automatic Subscription Creation: Automatically creates subscriptions. Registration Redirection: Forces visitors to register via Membership Pro. Import/Export Data: Import/export subscriptions/coupons. Migration Tool: Migrates data. Joomla Update: Allows updating to new versions from the administrator area. Summary This vulnerability primarily involves unauthorized access to restricted resources and affects multiple Joomla versions. It is recommended to upgrade to the latest version and correctly configure membership subscription plans to fix the vulnerability. No specific POC code or exploit code was provided on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Membership Pro Joomla Plugin Unauthorized Access to Restricted Resources