critical9.8
CVE-2016-10971
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.
Impact
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Membersonic | Membersonic | before 1.302 |