The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: tenable
Published: 2023-01-20T00:00:00
Updated: 2024-08-02T10:35:33.209Z
Reserved: 2023-01-12T00:00:00
Link: CVE-2023-23488
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-01-20T18:15:10.470
Modified: 2024-11-21T07:46:17.217
Link: CVE-2023-23488
Redhat
No data.