CVE-2015-4038: Medium severity wp membership vulnerability
Published Jun 3, 2015
·Updated
The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an ivmembershipupdateusersettings action to wp-admin/admin-ajax.php.
Affected Software
1 affected component
Wpmembership Wpmembership Wordpress=1.2.3
Event History
Jun 3, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4038?
CVE-2015-4038 is considered a high-severity vulnerability due to the potential for privilege escalation to administrator level.
2
How do I fix CVE-2015-4038?
To fix CVE-2015-4038, you should update the WP Membership plugin to a version that has addressed this vulnerability.
3
Who is affected by CVE-2015-4038?
CVE-2015-4038 affects users of the WP Membership plugin version 1.2.3 for WordPress.
4
What kind of attack is possible with CVE-2015-4038?
CVE-2015-4038 allows remote authenticated users to gain unauthorized administrator privileges.
5
What actions can be performed due to CVE-2015-4038?
Due to CVE-2015-4038, an attacker can exploit the vulnerability to manipulate user settings and potentially compromise the entire site.