WordPress security by component
WP MLM Unilevel
Plugin description
WP MLM Unilevel is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published May 17, 2024; the highest CVE/CNA score is 10.
Plugin slug:
wp-mlmLatest vulnerability
CVE-2023-51476: WP MLM Unilevel: Privilege escalation or authentication bypass
WP MLM Unilevel is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
| Safe version |
|
||
|---|---|---|---|
| May 17, 2024 |
CVE-2023-51476
WP MLM Unilevel: Privilege escalation or authentication bypass
WP MLM Unilevel is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Dec 29, 2023 |
CVE-2023-51475
WP MLM SOFTWARE PLUGIN: Dangerous file upload
WP MLM SOFTWARE PLUGIN is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE10.0
NVD9.8
|