CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2869

The WP-Members Membership plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the do_field_reorder function in versions up to, and including, 3.4.7.3. This makes it possible for authenticated attackers with subscriber-level access to reorder form elements on login forms.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.8%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2023-2869

Butlerblog » Wp-Members » Version: N/A

cpe:2.3:a:butlerblog:wp-members:-
Butlerblog » Wp-Members » Version: 3.1.7

cpe:2.3:a:butlerblog:wp-members:3.1.7
Butlerblog » Wp-Members » Version: 3.2.0

cpe:2.3:a:butlerblog:wp-members:3.2.0
Butlerblog » Wp-Members » Version: 3.2.1

cpe:2.3:a:butlerblog:wp-members:3.2.1
Butlerblog » Wp-Members » Version: 3.2.2

cpe:2.3:a:butlerblog:wp-members:3.2.2
Butlerblog » Wp-Members » Version: 3.2.3

cpe:2.3:a:butlerblog:wp-members:3.2.3
Butlerblog » Wp-Members » Version: 3.2.4

cpe:2.3:a:butlerblog:wp-members:3.2.4
Butlerblog » Wp-Members » Version: 3.2.5

cpe:2.3:a:butlerblog:wp-members:3.2.5
Butlerblog » Wp-Members » Version: 3.2.6

cpe:2.3:a:butlerblog:wp-members:3.2.6
Butlerblog » Wp-Members » Version: 3.2.7

cpe:2.3:a:butlerblog:wp-members:3.2.7
Butlerblog » Wp-Members » Version: 3.2.8

cpe:2.3:a:butlerblog:wp-members:3.2.8
Butlerblog » Wp-Members » Version: 3.2.9

cpe:2.3:a:butlerblog:wp-members:3.2.9
Butlerblog » Wp-Members » Version: 3.2.9.1

cpe:2.3:a:butlerblog:wp-members:3.2.9.1
Butlerblog » Wp-Members » Version: 3.2.9.2

cpe:2.3:a:butlerblog:wp-members:3.2.9.2
Butlerblog » Wp-Members » Version: 3.2.9.3

cpe:2.3:a:butlerblog:wp-members:3.2.9.3
Butlerblog » Wp-Members » Version: 3.3.0

cpe:2.3:a:butlerblog:wp-members:3.3.0
Butlerblog » Wp-Members » Version: 3.3.1

cpe:2.3:a:butlerblog:wp-members:3.3.1
Butlerblog » Wp-Members » Version: 3.3.2

cpe:2.3:a:butlerblog:wp-members:3.3.2
Butlerblog » Wp-Members » Version: 3.3.3

cpe:2.3:a:butlerblog:wp-members:3.3.3
Butlerblog » Wp-Members » Version: 3.3.4

cpe:2.3:a:butlerblog:wp-members:3.3.4
Butlerblog » Wp-Members » Version: 3.3.5

cpe:2.3:a:butlerblog:wp-members:3.3.5
Butlerblog » Wp-Members » Version: 3.3.6

cpe:2.3:a:butlerblog:wp-members:3.3.6
Butlerblog » Wp-Members » Version: 3.3.7

cpe:2.3:a:butlerblog:wp-members:3.3.7
Butlerblog » Wp-Members » Version: 3.3.8

cpe:2.3:a:butlerblog:wp-members:3.3.8
Butlerblog » Wp-Members » Version: 3.3.9

cpe:2.3:a:butlerblog:wp-members:3.3.9
Butlerblog » Wp-Members » Version: 3.4.0

cpe:2.3:a:butlerblog:wp-members:3.4.0
Butlerblog » Wp-Members » Version: 3.4.1

cpe:2.3:a:butlerblog:wp-members:3.4.1
Butlerblog » Wp-Members » Version: 3.4.2

cpe:2.3:a:butlerblog:wp-members:3.4.2
Butlerblog » Wp-Members » Version: 3.4.3

cpe:2.3:a:butlerblog:wp-members:3.4.3
Butlerblog » Wp-Members » Version: 3.4.4

cpe:2.3:a:butlerblog:wp-members:3.4.4
Butlerblog » Wp-Members » Version: 3.4.5

cpe:2.3:a:butlerblog:wp-members:3.4.5
Butlerblog » Wp-Members » Version: 3.4.6

cpe:2.3:a:butlerblog:wp-members:3.4.6
Butlerblog » Wp-Members » Version: 3.4.7

cpe:2.3:a:butlerblog:wp-members:3.4.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2869

Products

Pricing

Contact Us