CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-7493

The WPCOM Member plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5.2.1. This is due to the plugin allowing arbitrary data to be passed to wp_insert_user() during registration. This makes it possible for unauthenticated attackers to update their role to that of an administrator during registration.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 70.6%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2024-7493

Wpcom » Wpcom Member » Version: N/A

cpe:2.3:a:wpcom:wpcom_member:-
Wpcom » Wpcom Member » Version: 1.0.10

cpe:2.3:a:wpcom:wpcom_member:1.0.10
Wpcom » Wpcom Member » Version: 1.0.11

cpe:2.3:a:wpcom:wpcom_member:1.0.11
Wpcom » Wpcom Member » Version: 1.0.9

cpe:2.3:a:wpcom:wpcom_member:1.0.9
Wpcom » Wpcom Member » Version: 1.1.0

cpe:2.3:a:wpcom:wpcom_member:1.1.0
Wpcom » Wpcom Member » Version: 1.1.1

cpe:2.3:a:wpcom:wpcom_member:1.1.1
Wpcom » Wpcom Member » Version: 1.1.2

cpe:2.3:a:wpcom:wpcom_member:1.1.2
Wpcom » Wpcom Member » Version: 1.1.3

cpe:2.3:a:wpcom:wpcom_member:1.1.3
Wpcom » Wpcom Member » Version: 1.1.4

cpe:2.3:a:wpcom:wpcom_member:1.1.4
Wpcom » Wpcom Member » Version: 1.1.5

cpe:2.3:a:wpcom:wpcom_member:1.1.5
Wpcom » Wpcom Member » Version: 1.1.6

cpe:2.3:a:wpcom:wpcom_member:1.1.6
Wpcom » Wpcom Member » Version: 1.1.7

cpe:2.3:a:wpcom:wpcom_member:1.1.7
Wpcom » Wpcom Member » Version: 1.2.0

cpe:2.3:a:wpcom:wpcom_member:1.2.0
Wpcom » Wpcom Member » Version: 1.2.1

cpe:2.3:a:wpcom:wpcom_member:1.2.1
Wpcom » Wpcom Member » Version: 1.2.10

cpe:2.3:a:wpcom:wpcom_member:1.2.10
Wpcom » Wpcom Member » Version: 1.2.11

cpe:2.3:a:wpcom:wpcom_member:1.2.11
Wpcom » Wpcom Member » Version: 1.2.2

cpe:2.3:a:wpcom:wpcom_member:1.2.2
Wpcom » Wpcom Member » Version: 1.2.3

cpe:2.3:a:wpcom:wpcom_member:1.2.3
Wpcom » Wpcom Member » Version: 1.2.4

cpe:2.3:a:wpcom:wpcom_member:1.2.4
Wpcom » Wpcom Member » Version: 1.2.5

cpe:2.3:a:wpcom:wpcom_member:1.2.5
Wpcom » Wpcom Member » Version: 1.2.6

cpe:2.3:a:wpcom:wpcom_member:1.2.6
Wpcom » Wpcom Member » Version: 1.2.7

cpe:2.3:a:wpcom:wpcom_member:1.2.7
Wpcom » Wpcom Member » Version: 1.2.8

cpe:2.3:a:wpcom:wpcom_member:1.2.8
Wpcom » Wpcom Member » Version: 1.2.9

cpe:2.3:a:wpcom:wpcom_member:1.2.9
Wpcom » Wpcom Member » Version: 1.3.0

cpe:2.3:a:wpcom:wpcom_member:1.3.0
Wpcom » Wpcom Member » Version: 1.3.1

cpe:2.3:a:wpcom:wpcom_member:1.3.1
Wpcom » Wpcom Member » Version: 1.3.10

cpe:2.3:a:wpcom:wpcom_member:1.3.10
Wpcom » Wpcom Member » Version: 1.3.11

cpe:2.3:a:wpcom:wpcom_member:1.3.11
Wpcom » Wpcom Member » Version: 1.3.12

cpe:2.3:a:wpcom:wpcom_member:1.3.12
Wpcom » Wpcom Member » Version: 1.3.13

cpe:2.3:a:wpcom:wpcom_member:1.3.13
Wpcom » Wpcom Member » Version: 1.3.14

cpe:2.3:a:wpcom:wpcom_member:1.3.14
Wpcom » Wpcom Member » Version: 1.3.2

cpe:2.3:a:wpcom:wpcom_member:1.3.2
Wpcom » Wpcom Member » Version: 1.3.3

cpe:2.3:a:wpcom:wpcom_member:1.3.3
Wpcom » Wpcom Member » Version: 1.3.4

cpe:2.3:a:wpcom:wpcom_member:1.3.4
Wpcom » Wpcom Member » Version: 1.3.5

cpe:2.3:a:wpcom:wpcom_member:1.3.5
Wpcom » Wpcom Member » Version: 1.3.6

cpe:2.3:a:wpcom:wpcom_member:1.3.6
Wpcom » Wpcom Member » Version: 1.3.7

cpe:2.3:a:wpcom:wpcom_member:1.3.7
Wpcom » Wpcom Member » Version: 1.3.8

cpe:2.3:a:wpcom:wpcom_member:1.3.8
Wpcom » Wpcom Member » Version: 1.3.9

cpe:2.3:a:wpcom:wpcom_member:1.3.9
Wpcom » Wpcom Member » Version: 1.4.0

cpe:2.3:a:wpcom:wpcom_member:1.4.0
Wpcom » Wpcom Member » Version: 1.5.0

cpe:2.3:a:wpcom:wpcom_member:1.5.0
Wpcom » Wpcom Member » Version: 1.5.1

cpe:2.3:a:wpcom:wpcom_member:1.5.1
Wpcom » Wpcom Member » Version: 1.5.1.1

cpe:2.3:a:wpcom:wpcom_member:1.5.1.1
Wpcom » Wpcom Member » Version: 1.5.1.3

cpe:2.3:a:wpcom:wpcom_member:1.5.1.3
Wpcom » Wpcom Member » Version: 1.5.1.4

cpe:2.3:a:wpcom:wpcom_member:1.5.1.4
Wpcom » Wpcom Member » Version: 1.5.2

cpe:2.3:a:wpcom:wpcom_member:1.5.2
Wpcom » Wpcom Member » Version: 1.5.2.1

cpe:2.3:a:wpcom:wpcom_member:1.5.2.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-7493

Products

Pricing

Contact Us