Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Memberhero Subscribe
Filtered by product Member Hero
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0885 1 Memberhero 1 Member Hero 2022-06-17 7.5 HIGH 9.8 CRITICAL
The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments.