Wpindeed
6 CVEs across 6 Wpindeed products. Browse Wpindeed vulnerabilities, severities, and proof-of-concept exploits.
Wpindeed products with known CVEs
Wpindeed CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-13846 | Medium | 4.9 | 2025-02-21 | The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and includin… |
CVE-2025-22350 | High | 7.6 | 2025-01-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpIndeed Ultimate Learning Pro allows SQL Injection.This… |
CVE-2020-36833 | Medium | 6.3 | 2024-10-16 | The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions in versions 7.3 -… |
CVE-2020-36832 | Critical | 9.8 | 2024-10-16 | The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible… |
CVE-2024-43242 | Critical | 9.0 | 2024-08-19 | Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a… |
CVE-2024-43240 | Critical | 9.4 | 2024-08-19 | Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <=… |
CVE-2023-26516 | High | 8.8 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions. |
CVE-2023-26527 | Medium | 5.9 | 2023-06-16 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions. |