Plugin: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Versions: <= 3.8.1
CVSS: 6.4/10
Correctif: 3.8.2

27 juil. 2026

Lire

ÉlevéeCVSS 8.8

CVE-2026-13352

Téléversement de fichier, authentifié (Auteur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.16.18)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.16.18
CVSS: 8.8/10
Correctif: 4.16.19

Défaut de contrôle d'accès, non authentifié, dans User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (<= 4.3.7)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
Versions: <= 4.3.7
CVSS: 5.3/10
Correctif: 4.3.8

Défaut de contrôle d'accès, non authentifié, dans User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (<= 4.3.7)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
Versions: <= 4.3.7
CVSS: 5.3/10
Correctif: 4.3.8

Défaut de contrôle d'accès, non authentifié, dans User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (<= 4.3.1)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
Versions: <= 4.3.1
CVSS: 5.3/10
Correctif: 4.3.2

Élévation de privilèges dans WCFM Membership – WooCommerce Memberships for Multivendor Marketplace (<= 2.11.10)

Plugin: WCFM Membership – WooCommerce Memberships for Multivendor Marketplace
Versions: <= 2.11.10
CVSS: 8.1/10
Correctif: 2.11.11

XSS stocké, authentifié (Abonné+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.11.4)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.11.4
CVSS: 6.4/10
Correctif: 2.12.0

XSS stocké, authentifié (Administrateur+), dans Team Members – Multi Language Supported Team Plugin (<= 8.7)

Plugin: Team Members – Multi Language Supported Team Plugin
Versions: <= 8.7
CVSS: 4.4/10
Correctif: 8.8

CSRF (Cross-Site Request Forgery) dans Paid Memberships Pro - Add Member From Admin (<= 0.7.2)

Plugin: Paid Memberships Pro - Add Member From Admin
Versions: <= 0.7.2
CVSS: 4.3/10
Correctif: 0.7.3

Défaut de contrôle d'accès, non authentifié, dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 5.2.0)

Plugin: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Versions: <= 5.2.0
CVSS: 6.5/10
Correctif: 5.2.1

Prise de contrôle de compte, authentifié (Contributeur+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.11.4)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.11.4
CVSS: 8.8/10
Correctif: 2.12.0

23 juin 2026

Lire

13 – 24 sur 472 articles

Votre site est-il exposé ?

Analysez-le gratuitement. En-têtes de sécurité, fichiers exposés et version détectable, en quelques secondes.

Analyser mon site gratuitement