Filtered by vendor Wpclubmanager Subscriptions
Filtered by product Wp Club Manager Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-32566 1 Wpclubmanager 1 Wp Club Manager 2024-11-21 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Club Manager allows Stored XSS.This issue affects WP Club Manager: from n/a through 2.2.11.
CVE-2024-1177 1 Wpclubmanager 1 Wp Club Manager 2024-11-21 5.3 Medium
The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settings_save() function in all versions up to, and including, 2.2.10. This makes it possible for unauthenticated attackers to update the permalink structure for the clubs