CVE-2024-12287

The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, such as administrators, granted they have access to an email.

• CWE-287

• https://themeforest.net/item/biagiotti-beauty-and-cosmetics-shop/24645919
• https://www.wordfence.com/threat-intel/vulnerabilities/id/12f319df-41eb-484a-8fca-af6ae76f4179?source=cve

Published

Dec 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12281The Homey theme for WordPress is vulnerable to privilege esc…9.8
• CVE-2024-12282The WordPress连接微博 WordPress plugin through 2.5.6 does not ha…6.1
• CVE-2024-12283The WP Pipes plugin for WordPress is vulnerable to Reflected…6.1
• CVE-2024-12284Authenticated privilege escalation in NetScaler Console and …8.8
• CVE-2024-12285The SEMA API plugin for WordPress is vulnerable to Reflected…6.1
• CVE-2024-12286MOBATIME Network Master Clock - DTS 4801 allows attackers to…9.8
• CVE-2024-12288The Simple add pages or posts plugin for WordPress is vulner…6.1
• CVE-2024-12289Boundary Community Edition and Boundary Enterprise (“Boundar…5.9
• CVE-2024-1229The SimpleShop plugin for WordPress is vulnerable to unautho…5.3
• CVE-2024-12290The Infility Global plugin for WordPress is vulnerable to Re…6.1
• CVE-2024-12291The ViewMedica 9 plugin for WordPress is vulnerable to Cross…6.1
• CVE-2024-12292An issue was discovered in GitLab CE/EE affecting all versio…4