Known vulnerabilities in the User Profile Membership plugin
7 security advisories have been published for the User Profile Membership plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- User Profile Membership - Security Vulnerability (CVE-2018-0590) MEDIUM
- User Profile Membership - Security Vulnerability (CVE-2018-0589) MEDIUM
- User Profile Membership - Path Traversal (CVE-2018-0588) HIGH
- User Profile Membership - Arbitrary File Upload (CVE-2018-0587) MEDIUM
- User Profile Membership - Path Traversal (CVE-2018-0586) MEDIUM
- User Profile Membership - Cross-Site Request Forgery (CSRF) (CVE-2018-10233) HIGH
- User Profile Membership - Cross-Site Scripting (XSS) (CVE-2018-10234) MEDIUM