CA
Vendor
Caseproof
12
CVEs
0
On KEV
0
New 30D
Products
ME9.8
Memberpress
Caseproof
5 CVEs0 on KEV0 new
PR7.2
Prettylinks
Caseproof
4 CVEs0 on KEV0 new
TA5.4
Thirstyaffiliates Affiliate Link Manager
Caseproof
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-11299 | ME Memberpress Caseproof | 7.5 | Apr 22 | Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure |
| CVE-2024-43956 | ME Memberpress Caseproof | 9.8 | Nov 1 | WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability |
| CVE-2024-5025 | ME Memberpress Caseproof | 5.4 | May 22 | MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter |
| CVE-2024-5031 | ME Memberpress Caseproof | 6.4 | May 22 | MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode |
| CVE-2024-1412 | ME Memberpress Caseproof | 6.1 | Apr 9 | Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error |
| CVE-2024-2326 | PR Prettylinks Caseproof | 4.3 | Mar 23 | Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update |
| CVE-2022-0634 | TA Thirstyaffiliates Affiliate Link Manager Caseproof | 4.3 | Apr 25 | ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF |
| CVE-2022-0398 | TA Thirstyaffiliates Affiliate Link Manager Caseproof | 5.4 | Apr 25 | ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation |
| CVE-2021-24127 | TA Thirstyaffiliates Affiliate Link Manager Caseproof | 5.4 | Mar 18 | Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored… |
| CVE-2011-4595 | PR Prettylinks Caseproof | 6.1 | Jan 10 | Pretty-Link WordPress plugin 1.5.2 has XSS |
| CVE-2015-9457 | PR Prettylinks Caseproof | 7.2 | Oct 10 | The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter |
| CVE-2013-1636 | PR Prettylinks Caseproof | – | Mar 12 | Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress,… |