Vulnerability CVE-2024-43242

Vulnerability CVE-2024-43242

Published: 2024-08-19

Description:

Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro allows Object Injection.This issue affects Ultimate Membership Pro: from n/a through 12.6.

Type:

CWE-502

(Deserialization of Untrusted Data)

References:

https://patchstack.com/database/vulnerability/indeed-membership-pro/wordpress-indeed-ultimate-membership-pro-plugin-12-6-unauthenticated-php-object-injection-vulnerability?_s_id=cve