Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-5076

WP eMember < 10.6.6 - Bulk Delete via CSRF

Description

The wp-eMember WordPress plugin before 10.6.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown wp-eMember

Default version status: unaffected

  • 0 to < 10.6.6affected

References