Caseproof vulnerabilities

Products

• Memberpress 5
• Prettylinks 4
• Thirstyaffiliates Affiliate Link Manager 3

Newest

• caseproof memberpress Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CVE-2024-11299 5.3 MediumApril 22, 2025
• caseproof memberpress WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability CVE-2024-43956 6.5 MediumNovember 1, 2024
• caseproof memberpress MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter CVE-2024-5025 6.4 MediumMay 22, 2024
• caseproof memberpress MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode CVE-2024-5031 8.5 HighMay 22, 2024
• caseproof memberpress Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error CVE-2024-1412 6.1 MediumApril 9, 2024
• caseproof prettylinks, supercleanse prettylinks – affiliate links, link branding, link tracking, marketing and stripe payments plugin +1 more Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update CVE-2024-2326 4.3 MediumMarch 23, 2024
• blair williams thirstyaffiliates, caseproof thirstyaffiliates affiliate link manager +1 more ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF CVE-2022-0634 4.3 MediumApril 25, 2022
• caseproof thirstyaffiliates affiliate link manager ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation CVE-2022-0398 5.4 MediumApril 25, 2022
• blair williams thirstyaffiliates, caseproof thirstyaffiliates affiliate link manager +1 more ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS CVE-2021-24127 5.4 MediumMarch 18, 2021
• pretty-link plugin, caseproof prettylinks +1 more Pretty-Link WordPress plugin 1.5.2 has XSS CVE-2011-4595 Public exploit 6.1 MediumJanuary 10, 2020
• caseproof prettylinks The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL... CVE-2015-9457 7.2 HighOctober 10, 2019
• civicrm, caseproof prettylinks, joobi com jnews +2 more Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open... CVE-2013-1636 Public exploit 4.3 MediumMarch 12, 2014