Azzaroco vulnerabilities

We track 11 vulnerabilities in Azzaroco products across 4 products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.

11vulnerabilities

4critical

7high

0exploited

8.3average CVSS score

Latest Azzaroco vulnerabilities

8.1 High severity
Ultimate Membership Pro: Authentication Bypass Using an Alternate Path or Channel
CVE-2026-25357Mar 25, 2026Azzaroco
Authentication Bypass Using an Alternate Path or Channel vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro allows Authentication Abuse.This issue affects Ultimate Membership Pro: from n/a through <= 13.7.
7.1 High severity
Ultimate Learning Pro: Improper Neutralization of Input During Web Page Generation
CVE-2026-28113Mar 5, 2026Azzaroco
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Reflected XSS.This issue affects Ultimate Learning Pro: from n/a through <= 3.9.1.
7.1 High severity
WP SuperBackup: Improper Neutralization of Input During Web Page Generation
CVE-2024-56069Jan 2, 2025Azzaroco
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
7.4 High severity
WP SuperBackup: Missing Authorization
CVE-2024-56070Dec 31, 2024Azzaroco
Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
7.5 High severity
WP SuperBackup: Deserialization of Untrusted Data
CVE-2024-56068Dec 31, 2024Azzaroco
Deserialization of Untrusted Data vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
7.5 High severity
WP SuperBackup: Missing Authorization
CVE-2024-56067Dec 31, 2024AzzarocoEPSS 11.7%
Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
10.0 Critical severity
WP SuperBackup: Unrestricted Upload of File with Dangerous Type
CVE-2024-56064Dec 31, 2024AzzarocoEPSS 33%
Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
9.8 Critical severity
Super Backup & Clone - Migrate for WordPress: Unrestricted Upload of File with Dangerous Type
CVE-2024-9290Dec 13, 2024AzzarocoEPSS 3.53%
The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up to, and including, 2
10.0 Critical severity
Ultimate Membership Pro: Deserialization of Untrusted Data
CVE-2024-43242Aug 19, 2024Azzaroco
Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.
9.8 Critical severity
Ultimate Membership Pro: Improper Authentication
CVE-2024-43240Aug 19, 2024Azzaroco
Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.
7.1 High severity
Ultimate Membership Pro: Improper Neutralization of Input During Web Page Generation
CVE-2024-43241Aug 18, 2024Azzaroco
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through <= 12.7.