Biagiotti Membership [biagiotti-membership] < 1.1
unknown
[en] The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, such as a...
- Affected:
- up to 1.1
- Fixed in:
- 1.1
- Disclosed:
- Dec 18, 2024
CVE-2024-12287 on NVD →
Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user
critical
The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, such as admini...
- CVSS:
- 9.8
- Affected:
- up to 1.0.2
- Fixed in:
- 1.1
- Disclosed:
- Dec 17, 2024
CVE-2024-12287 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database