Member Hero vulnerabilities
We track 1 vulnerability in Member Hero products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 13, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Member Hero vulnerabilities
- 9.8 Critical severity
Member Hero: Improper Control of Generation of Code
The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments.