CVE-2023-39990: WordPress Paid Memberships Pro plugin <= 1.2.3 - Broken Access Control vulnerability
Published Jun 19, 2024
·Updated
Missing Authorization vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 1.2.3.
Affected Software
3 affected components
Strangerstudios Paid Memberships Pro Wordpress<1.2.4
Paid Memberships Pro Paid Memberships Pro<=1.2.3
WordPress Paid Memberships Pro<=1.2.3
Remediation
Information
Update to 1.2.4 or a higher version.
Event History
Jun 19, 2024
CVE Published
via MITRE·12:08 PM
Data Sourced
via MITRE·12:08 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-39990?
CVE-2023-39990 is classified as a Missing Authorization vulnerability in Paid Memberships Pro.
2
How do I fix CVE-2023-39990?
To fix CVE-2023-39990, upgrade Paid Memberships Pro to version 1.2.4 or later.
3
Which versions of Paid Memberships Pro are affected by CVE-2023-39990?
CVE-2023-39990 affects Paid Memberships Pro versions up to and including 1.2.3.
4
What types of attacks can exploit CVE-2023-39990?
CVE-2023-39990 can potentially allow unauthorized access to restricted features in Paid Memberships Pro.
5
Is there any public information available on CVE-2023-39990?
Yes, CVE-2023-39990 has been publicly documented in various cybersecurity vulnerability databases.