PT-2026-97191 · WordPress · Paid Membership Subscriptions
CVSS v3.1
3.7
منخفضة
| المتجه | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Paid Membership Subscriptions versions prior to 3.1.0
Description
An issue exists where an unauthenticated payment action is not bound to the requesting user. This allows an attacker who possesses another member's in-flight payment identifier to delete that member's checkout state.
Recommendations
Update Paid Membership Subscriptions to version 3.1.0 or later.
استغلال
إصلاح
Incorrect Authorization
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Paid Membership Subscriptions