目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Paid Memberships Pro 厂商漏洞列表 / CVE 中文分析 8

Paid Memberships Pro 厂商相关 8 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Paid Memberships Pro 是一款 WordPress 会员管理插件，帮助网站创建付费订阅和会员等级。历史上曾存在多个安全漏洞，包括身份验证绕过、权限提升、跨站脚本(XSS)和远程代码执行(RCE)等类型。截至最新统计，该插件已记录 8 条 CVE 漏洞，主要集中在访问控制机制缺陷。安全研究人员曾发现其早期版本存在未经验证的参数直接用于 SQL 查询的问题，可能导致数据库泄露。建议用户及时更新至最新版本以修复已知安全风险。

上位製品 Paid Memberships Pro: Paid Memberships Pro Paid Memberships Pro – Payfast Gateway Add On Paid Memberships Pro – Mailchimp Add On Paid Memberships Pro CCBill Gateway
CVE IDタイトルCVSS深刻度公開日
CVE-2024-37277 WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability — Paid Memberships ProCWE-639 7.5 High2024-11-01
CVE-2024-37486 WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability — Paid Memberships ProCWE-89 7.6 High2024-07-09
CVE-2023-39990 WordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability — Paid Memberships ProCWE-862 5.4 Medium2024-06-19
CVE-2023-40608 WordPress Paid Memberships Pro CCBill Gateway plugin <= 0.3 - Unauthenticated Broken Access Control vulnerability — Paid Memberships Pro CCBill GatewayCWE-862 8.2 High2024-06-19
CVE-2024-32793 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability — Paid Memberships ProCWE-352 5.4 Medium2024-04-24
CVE-2024-32794 WordPress Paid Memberships Pro plugin <= 2.12.10 - Cross Site Request Forgery (CSRF) vulnerability — Paid Memberships ProCWE-352 4.3 Medium2024-04-24
CVE-2024-30523 WordPress Paid Memberships Pro – Mailchimp Add On plugin <= 2.3.4 - Sensitive Data Exposure vulnerability — Paid Memberships Pro – Mailchimp Add OnCWE-532 5.3 Medium2024-03-31
CVE-2024-30514 WordPress Paid Memberships Pro – Payfast Gateway Add On plugin <= 1.4.1 - Sensitive Data Exposure via Log File vulnerability — Paid Memberships Pro – Payfast Gateway Add OnCWE-532 5.3 Medium2024-03-29

本页汇总了 Paid Memberships Pro 厂商截至目前公开的全部 8 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。