Azzaroco vulnerabilities

Products

• Wp Superbackup 5
• Ultimate Membership Pro 4
• Ultimate Learning Pro 3

Newest

• azzaroco ultimate membership pro WordPress Ultimate Membership Pro plugin <= 13.7 - Account Takeover vulnerability CVE-2026-25357 8.1 HighMarch 25, 2026
• azzaroco ultimate learning pro WordPress Ultimate Learning Pro plugin <= 3.9.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-28113 7.1 HighMarch 5, 2026
• azzaroco ultimate learning pro WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbitrary Content Deletion vulnerability CVE-2025-64251 4.9 MediumDecember 16, 2025
• azzaroco indeed ultimate learning pro, wpindeed ultimate learning pro +1 more Indeed Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameter CVE-2024-13846 4.9 MediumFebruary 21, 2025
• azzaroco ultimate learning pro WordPress Indeed Ultimate Learning Pro plugin <= 3.9 - SQL Injection vulnerability CVE-2025-22350 7.6 HighJanuary 7, 2025
• azzaroco wp superbackup WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-56069 7.1 HighJanuary 2, 2025
• azzaroco wp superbackup WordPress WP SuperBackup plugin <= 2.3.3 - Multiple Subscriber+ Broken Access Control vulnerabilities CVE-2024-56070 7.4 HighDecember 31, 2024
• azzaroco wp superbackup WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability CVE-2024-56064 Public exploit EPSS 33.2% 10.0 CriticalDecember 31, 2024
• azzaroco wp superbackup WordPress WP SuperBackup plugin <= 2.3.3 - Subscriber+ PHP Object Injection vulnerability CVE-2024-56068 7.5 HighDecember 31, 2024
• azzaroco wp superbackup WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Backup File Download Vulnerability CVE-2024-56067 Public exploit EPSS 11.7% 7.5 HighDecember 31, 2024
• azzaroco super backup & clone - migrate for wordpress Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload CVE-2024-9290 Public exploit 9.8 CriticalDecember 13, 2024
• azzaroco ultimate membership pro WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated PHP Object Injection vulnerability CVE-2024-43242 9.0 CriticalAugust 19, 2024
• azzaroco ultimate membership pro WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability CVE-2024-43240 9.4 CriticalAugust 19, 2024
• azzaroco ultimate membership pro WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-43241 7.1 HighAugust 18, 2024