Repute Infosystems vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Repute Infosystems products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
CriticalCVE-2023-52200repute infosystems · armember – membership plugin, content restriction, member levels, user profile & user signup +2 moreWordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object InjectionCross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup: n/a.EPSS0.27%CriticalCVE-2023-51405repute infosystems · bookingpress +2 moreWordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerabilityImproper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BookingPress: from n/a through 1.0.74.EPSS0.66%HighCVE-2023-51356repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerabilityImproper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.EPSS0.55%HighCVE-2023-47837repute infosystems · armember +2 moreWordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerabilityImproper Privilege Management vulnerability in Repute Infosystems ARMember allows Privilege Escalation.This issue affects ARMember: from n/a through 4.0.10.EPSS0.39%MediumCVE-2023-36507repute infosystems · bookingpress – appointment booking calendar plugin and online scheduling plugin +2 moreWordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data ExposureExposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.64.EPSS0.62%MediumCVE-2023-39994repute infosystems · armember premium +2 moreWordPress ARMember Premium plugin <= 5.9.2 - Broken Access ControlMissing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember Premium: from n/a through 5.9.2.EPSS0.35%HighCVE-2023-50841repute infosystems · bookingpress – appointment booking calendar plugin and online scheduling plugin +2 moreWordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.72.EPSS0.53%MediumCVE-2023-33323repute infosystems · armember +2 moreWordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.2 versions.EPSS0.37%