Caseproof

12 CVEs across 3 Caseproof products. Browse Caseproof vulnerabilities, severities, and proof-of-concept exploits.

Caseproof products with known CVEs

ProductCVEs
Memberpress5
Prettylinks4
Thirstyaffiliates Affiliate Link Manager3
Caseproof CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-11299Medium5.32025-04-22The Memberpress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.37 via the WordPress core searc…
CVE-2024-43956Medium6.52024-11-01Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberpres…
CVE-2024-5031High8.52024-05-22The Memberpress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.11.29 via the 'mepr-user-file'…
CVE-2024-5025Medium6.42024-05-22The Memberpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arglist’ parameter in all versions up to, and including, 1.11.29 due…
CVE-2024-1412Medium6.12024-04-09The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘message’ and 'error' parameters in all versions up to, and includ…
CVE-2024-2326Medium4.32024-03-23The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver…
CVE-2022-0634Medium4.32022-04-25The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a r…
CVE-2022-0398Medium5.42022-04-25The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which co…
CVE-2021-24127Medium5.42021-03-18Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authen…
CVE-2011-4595Medium6.12020-01-10Pretty-Link WordPress plugin 1.5.2 has XSS
CVE-2015-9457High7.22019-10-10The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.
CVE-2013-16362014-03-12Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6…