azzaroco vulnerabilities and threats

13 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.4%	CVE-2026-25357Ultimate Membership Pro (WordPress plugin) · Authentication Bypass Using an Alternate Path or Channel High8.1EPSS 0.4%2026-03-25CVE Database V5CVE-2026-25357 Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ultimate Membership Pro: from n/a through <= 13.7. EPSS 0.4%Vulnerability azzaroco	CVE Database V5	2026-03-25
High	7.1	EPSS 0.2%	CVE-2026-28113Ultimate Learning Pro (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-03-05CVE Database V5CVE-2026-28113 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Reflected XSS.This issue affects Ultimate Learning Pro: from n/a through <= 3.9.1. EPSS 0.2%Vulnerability azzaroco	CVE Database V5	2026-03-05
Medium	4.9	EPSS 0.3%	CVE-2025-64251Ultimate Learning Pro (WordPress plugin) · Missing Authorization Medium4.9EPSS 0.3%2025-12-16CVE Database V5CVE-2025-64251 Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Learning Pro: from n/a through <= 3.9.3. EPSS 0.3%Vulnerability azzaroco	CVE Database V5	2025-12-16
Medium	4.9	EPSS 0.4%	CVE-2024-13846Indeed Ultimate Learning Pro (WordPress plugin) · SQL Injection Medium4.9EPSS 0.4%2025-02-21CVE Database V5CVE-2024-13846 The Indeed Ultimate Learning Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. EPSS 0.4%Vulnerability azzaroco CWE-89	CVE Database V5	2025-02-21
High	7.1	EPSS 0.3%	CVE-2024-56069WP SuperBackup · Cross-site Scripting High7.1EPSS 0.3%2025-01-02CVE Database V5CVE-2024-56069 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through <= 2.3.3. EPSS 0.3%Vulnerability azzaroco	CVE Database V5	2025-01-02
High	7.4	EPSS 0.4%	CVE-2024-56070WP SuperBackup · Missing Authorization High7.4EPSS 0.4%2024-12-31CVE Database V5CVE-2024-56070 Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3. EPSS 0.4%Vulnerability azzaroco	CVE Database V5	2024-12-31
Critical	10.0	EPSS 33%	CVE-2024-56064WP SuperBackup · Unrestricted File Upload Critical10.0EPSS 33%2024-12-31CVE Database V5CVE-2024-56064 Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through <= 2.3.3. EPSS 33%Vulnerability azzaroco	CVE Database V5	2024-12-31
High	7.5	EPSS 0.4%	CVE-2024-56068WP SuperBackup · Deserialization of Untrusted Data High7.5EPSS 0.4%2024-12-31CVE Database V5CVE-2024-56068 Deserialization of Untrusted Data vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup.This issue affects WP SuperBackup: from n/a through <= 2.3.3. EPSS 0.4%Vulnerability azzaroco	CVE Database V5	2024-12-31
High	7.5	EPSS 11%	CVE-2024-56067WP SuperBackup · Missing Authorization High7.5EPSS 11%2024-12-31CVE Database V5CVE-2024-56067 Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3. EPSS 11%Vulnerability azzaroco	CVE Database V5	2024-12-31
Critical	9.8	EPSS 3.5%	CVE-2024-9290Super Backup & Clone (WordPress plugin) · Unrestricted File Upload Critical9.8EPSS 3.5%2024-12-13CVE Database V5CVE-2024-9290 The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. EPSS 3.5%Vulnerability azzaroco CWE-434	CVE Database V5	2024-12-13
Critical	9.0	EPSS 0.5%	CVE-2024-43242Ultimate Membership Pro (WordPress plugin) · Deserialization of Untrusted Data Critical9.0EPSS 0.5%2024-08-19CVE Database V5CVE-2024-43242 Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7. EPSS 0.5%Vulnerability azzaroco	CVE Database V5	2024-08-19
Critical	9.4	EPSS 0.5%	CVE-2024-43240Ultimate Membership Pro (WordPress plugin) · Improper Authentication Critical9.4EPSS 0.5%2024-08-19CVE Database V5CVE-2024-43240 Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7. EPSS 0.5%Vulnerability azzaroco	CVE Database V5	2024-08-19
High	7.1	EPSS 0.3%	CVE-2024-43241Ultimate Membership Pro (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2024-08-18CVE Database V5CVE-2024-43241 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7. EPSS 0.3%Vulnerability azzaroco	CVE Database V5	2024-08-18

Page 1 of 1