Strangerstudios Paid Memberships Pro vulnerabilities

CVE-2024-1279 [MEDIUM] CWE-284 CVE-2024-1279: The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the cont The Paid Memberships Pro WordPress plugin before 2.12.9 does not prevent user with at least the contributor role from leaking other users' sensitive metadata.

CVE-2024-0588 [MEDIUM] CWE-352 CVE-2024-0588: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for W The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing nonce validation on the pmpro_lifter_save_streamline_option() function. This makes it possible for unauthenticated attackers to en

CVE-2020-36754 [MEDIUM] CWE-352 CVE-2020-36754: The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versio The Paid Memberships Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.2. This is due to missing or incorrect nonce validation on the pmpro_page_save() function. This makes it possible for unauthenticated attackers to save pages via a forged request granted they can trick a site administrator i

CVE-2024-3215 [MEDIUM] CWE-352 CVE-2024-3215: The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for W The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the pmpro_update_level_group_order() function. This makes it possible for unauthenticated attackers