WordPress plugin
iMember360is security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High4
- Medium1
- Low0
All iMember360is vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | 3.9.001 - Cross-Site Scripting 3.8.012 – <3.9.002Update to 3.9.002 | CVE-2014-3842 | |
| High7.5 | 3.9.001 - Missing Authorization 3.8.012 – <3.9.001Update to 3.9.001 | CVE-2014-3849 | |
| High7.5 | Missing Authorization and Sensitive Data Exposure <3.9.001Update to 3.9.001 | CVE-2014-3848 | |
| High7.2 | 3.9.001 - Remote Code Execution 3.8.012 – 3.9.001Update to 3.9.002 | CVE-2014-8949 | |
| High8.8 | 3.9.001 - Cross-Site Request Forgery 3.8.012 – <3.9.001Update to 3.9.001 | CVE-2014-8948 |
- Medium6.13.9.001 - Cross-Site Scripting
3.8.012 – <3.9.002Update to 3.9.002
- High7.53.9.001 - Missing Authorization
3.8.012 – <3.9.001Update to 3.9.001
- High7.5Missing Authorization and Sensitive Data Exposure
<3.9.001Update to 3.9.001
- High7.23.9.001 - Remote Code Execution
3.8.012 – 3.9.001Update to 3.9.002
- High8.83.9.001 - Cross-Site Request Forgery
3.8.012 – <3.9.001Update to 3.9.001
iMember360is: common questions
Does iMember360is have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in iMember360is: 4 high, 1 medium. None are known to affect version null.
How do I check which version of iMember360is I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent iMember360is vulnerability?
CVE-2014-3842, published May 14, 2014: iMember360is 3.8.012 - 3.9.001 - Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any iMember360is vulnerability listed in CISA KEV?
No. None of the known iMember360is vulnerabilities is currently listed in the CISA KEV catalog.
