CVE-2024-1389
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pms_stripe_connect_handle_authorization_return function in all versions up to, and including, 2.11.1. This makes it possible for unauthenticated attackers to change the Stripe payment keys.
El complemento Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction para WordPress es vulnerable a modificaciones no autorizadas de datos debido a una falta de verificación de capacidad en la función pms_stripe_connect_handle_authorization_return en todas las versiones hasta la 2.11.1 incluida. Esto hace posible que atacantes no autenticados cambien las claves de pago de Stripe.
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2024-02-08 CVE Reserved
- 2024-02-13 CVE Published
- 2024-02-21 EPSS Updated
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-862: Missing Authorization
CAPEC
References (3)
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Iovamihai Search vendor "Iovamihai" | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction Search vendor "Iovamihai" for product "Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction" | <= 2.11.1 Search vendor "Iovamihai" for product "Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction" and version " <= 2.11.1" | en |
Affected
|