CVE-2015-4038

Severity

65%

Complexity

80%

Confidentiality

106%

The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an iv_membership_update_user_settings action to wp-admin/admin-ajax.php.

The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an iv_membership_update_user_settings action to wp-admin/admin-ajax.php.

CVSS 2.0 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:P).

Overview

First reported 9 years ago

2015-06-03 20:59:00

Last updated 6 years ago

2018-10-09 19:57:00

Affected Software

WPMembership WPMembership for Wordpress 1.2.3

1.2.3
wordpress

References

http://packetstormsecurity.com/files/132012/WordPress-WP-Membership-1.2.3-Privilege-Escalation.html

Exploit

20150521 CVE-2015-4038 - WordPress WP Membership plugin [Privilege escalation]

20150601 CVE-2015-4038 - WordPress WP Membership plugin [Privilege escalation]

74766

https://wpvulndb.com/vulnerabilities/7998

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.