IOSS vulnerabilities

Products

• WP MLM SOFTWARE PLUGIN 1
• WP MLM Unilevel 1

Latest IOSS CVEs

Newest publication first

1. CVE-2023-51476 WordPress WP MLM Unilevel plugin <= 4.0 - Unauthenticated Account Takeover vulnerability

   Published 2024-05-17

   Critical·CVSS 9.8 EPSS 0.54%

   Improper Privilege Management vulnerability in IOSS WP MLM Unilevel allows Privilege Escalation.This issue affects WP MLM Unilevel: from n/a through 4.0.

2. CVE-2023-51475 WordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File Upload

   Published 2023-12-29

   Critical·CVSS 9.8 EPSS 0.56%

   Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.