Caseproof
2 CVEs across 3 Caseproof products. Browse Caseproof vulnerabilities, severities, and proof-of-concept exploits.
Caseproof products with known CVEs
Caseproof CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-11299 | Medium | 5.3 | 2025-04-22 | The Memberpress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.11.37 via the WordPress core searc… |
CVE-2024-43956 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberpres… |
CVE-2024-5031 | High | 8.5 | 2024-05-22 | The Memberpress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.11.29 via the 'mepr-user-file'… |
CVE-2024-5025 | Medium | 6.4 | 2024-05-22 | The Memberpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘arglist’ parameter in all versions up to, and including, 1.11.29 due… |
CVE-2024-1412 | Medium | 6.1 | 2024-04-09 | The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘message’ and 'error' parameters in all versions up to, and includ… |
CVE-2024-2326 | Medium | 4.3 | 2024-03-23 | The Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ver… |
CVE-2022-0634 | Medium | 4.3 | 2022-04-25 | The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a r… |
CVE-2022-0398 | Medium | 5.4 | 2022-04-25 | The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which co… |
CVE-2021-24127 | Medium | 5.4 | 2021-03-18 | Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authen… |
CVE-2011-4595 | Medium | 6.1 | 2020-01-10 | Pretty-Link WordPress plugin 1.5.2 has XSS |
CVE-2015-9457 | High | 7.2 | 2019-10-10 | The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter. |
CVE-2013-1636 | | | 2014-03-12 | Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6… |