→ برگشت به فید آسیب‌پذیری‌ها CVE-2026-96518 · wp-user-avatar

نقص در بررسی سطح دسترسی (Missing Authorization) در افزونه Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 4.17.3. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.