CVE-2014-3849

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbitrary users via a…

published May 23, 2014

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbitrary users via a request containing a user name in the Email parameter and the API key in the i4w_clearuser parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05973 · 93.2th percentile
Published
2014-05-23T14:00Z
EPSS history
Timeline
  • 23 MAY 14:00Z
    The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbitrary users via a…
    cvelistv5