CVE-2016-10971

The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-09-16

Last modified

2024-08-06

Weaknesses

CWE-269

Affected products

• Membersonic (Membersonic)

References

• http://www.pritect.net/blog/membersonic-lite-1-2-unauthenticated-login