Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-4038.
AI-analyzed exploit summary The document details multiple vulnerabilities in the WordPress WP Membership plugin, including privilege escalation via AJAX action manipulation, stored XSS due to insufficient input sanitization, and unauthorized post publishing by modifying form fields. It provides technical descriptions and proof-of-concept steps but does not include functional exploit code.
Description
The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an iv_membership_update_user_settings action to wp-admin/admin-ajax.php.
Exploits (1)
The document details multiple vulnerabilities in the WordPress WP Membership plugin, including privilege escalation via AJAX action manipulation, stored XSS due to insufficient input sanitization, and unauthorized post publishing by modifying form fields. It provides technical descriptions and proof-of-concept steps but does not include functional exploit code.