cbcvebase.

Memberhero Member Hero vulnerabilities

1 known vulnerability affecting memberhero/member_hero.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2022-0885P1CRITICALCVSS 9.8ExploitedPoC≤ 1.0.92022-06-13
CVE-2022-0885 [CRITICAL] CWE-94 CVE-2022-0885: The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments.
nvd
Memberhero Member Hero vulnerabilities | cvebase