CVE-2024-43242

严重 10.0CVE-2024-43242 · Published 19/08/2024 · updated 17/06/2026

要点

CVE-2024-43242 是影响 ultimate membership pro (wpindeed) 的严重 (CVSS 10.0)漏洞。
未来 30 天内被利用的概率（EPSS）：0.54%，高于 45.3% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
ultimate membership pro wpindeed	`≤ 12.6`	No fix yet

Description

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.

References

patchstack.com/database/Wordpress/Plugin/indeed-membership-pro/vulnerability/wordpress-indeed-ultimate-membership-pro-plugin-12-6-unauthenticated-php-object-injection-vulnerability

ultimate membership pro 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free