plugin
10 known security issues reported for the Pmpro Courses WordPress plugin. Most recent disclosed Jun 19, 2024.
Running Pmpro Courses on your site? Check whether your installed version is affected.
Scan your site free[en] Missing Authorization vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 1.2.3.
Update the WordPress Paid Memberships Pro - Courses for Membership Add On plugin to the latest available version (at least 1.2.5). WordFence discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Paid Memberships Pro Plugin. This could allow a malicious actor to inject malicious scripts, suc...
The Paid Memberships Pro - Courses for Membership Add On plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmpro_courses_modules' setting in versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
The Paid Memberships Pro - Courses for Membership Add On plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce verification on the pmpro_courses_update_course_callback() and pmpro_courses_remove_course_callback() functions called via AJAX actions in versions up to, and including, 1.2.3....
The Paid Memberships Pro - Courses for Membership Add On plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the pmpro_courses_update_course_callback() and pmpro_courses_remove_course_callback() functions called via AJAX actions in versions up to, and including, 1...
The Paid Memberships Pro - Courses for Membership Add On plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the pmpro_courses_update_course_callback() and pmpro_courses_remove_course_callback() functions called via AJAX actions in versions up to, and including, 1...
The Paid Memberships Pro - Courses for Membership Add On plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmpro_courses_modules' setting in versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
The Paid Memberships Pro - Courses for Membership Add On plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce verification on the pmpro_courses_update_course_callback() and pmpro_courses_remove_course_callback() functions called via AJAX actions in versions up to, and including, 1.2.3....
The Premium Courses & eLearning plugin for WordPress is vulnerable to SQL Injection via the ‘level_ids’ parameter in several of its modules in versions up to, and including, 1.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it poss...
The Premium Courses & eLearning plugin for WordPress is vulnerable to SQL Injection via the ‘level_ids’ parameter in several of its modules in versions up to, and including, 1.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it poss...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free