Buddypress Members Only

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-0972 Jun 06, 04:15 MEDIUM This Month

The BuddyPress Members Only plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.9 via the REST API. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Information Disclosure Buddypress Members Only Wordpress Plugin

NVD

CVSS 3.1

5.3

EPSS

0.3%

CVE-2024-0972

EPSS 0% CVSS 5.3

MEDIUM This Month

The BuddyPress Members Only plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.9 via the REST API. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Information Disclosure +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy