Membership Plugin – Kadence Memberships vulnerabilities
1 known vulnerability in Membership Plugin – Kadence Memberships from StellarWP. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest first
- 9.3 Critical severity
Membership Plugin – Kadence Memberships: Weak Password Recovery Mechanism for Forgotten Password
The Membership Plugin – Kadence Memberships plugin for WordPress (formerly Restrict Content) is vulnerable to password reset link poisoning leading to account takeover in all versions up to, and including, 4.0.0. This is due to the legacy lost-password handler