CA
Vendor
Caseproof
12
CVEs
0
On KEV
0
New 30D
Products
ME9.8
Memberpress
Caseproof
5 CVEs0 on KEV0 new
PR7.2
Prettylinks
Caseproof
4 CVEs0 on KEV0 new
TA5.4
Thirstyaffiliates Affiliate Link Manager
Caseproof
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-11299 | ME Memberpress Caseproof | 7.5 | Apr 22 | Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure |
| CVE-2024-43956 | ME Memberpress Caseproof | 9.8 | Nov 1 | WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability |
| CVE-2024-5031 | ME Memberpress Caseproof | 6.4 | May 22 | The Memberpress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.11.29 via the 'mepr-user-file' shortcode |
| CVE-2024-5025 | ME Memberpress Caseproof | 5.4 | May 22 | The Memberpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arglist’ parameter in all versions up to, and including, 1.11.29 due to insufficient… |
| CVE-2024-1412 | ME Memberpress Caseproof | 6.1 | Apr 9 | The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘message’ and 'error' parameters in all versions up to, and including, 1.11.26 due to… |
| CVE-2024-2326 | PR Prettylinks Caseproof | 4.3 | Mar 23 | The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… |
| CVE-2022-0634 | TA Thirstyaffiliates Affiliate Link Manager Caseproof | 4.3 | Apr 25 | The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a role as low as… |
| CVE-2022-0398 | TA Thirstyaffiliates Affiliate Link Manager Caseproof | 5.4 | Apr 25 | The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which could allow any… |
| CVE-2021-24127 | TA Thirstyaffiliates Affiliate Link Manager Caseproof | 5.4 | Mar 18 | Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored… |
| CVE-2011-4595 | PR Prettylinks Caseproof | 6.1 | Jan 10 | Pretty-Link WordPress plugin 1.5.2 has XSS |
| CVE-2015-9457 | PR Prettylinks Caseproof | 7.2 | Oct 10 | The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter |
| CVE-2013-1636 | PR Prettylinks Caseproof | – | Mar 12 | Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress,… |