Unrated severityNVD Advisory· Published Jun 3, 2015· Updated Jun 17, 2026

CVE-2015-4038

Description

The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an iv_membership_update_user_settings action to wp-admin/admin-ajax.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wpmembership/Wpmembership
cpe:2.3:a:wpmembership:wpmembership:1.2.3:*:*:*:*:wordpress:*:*
WordPress/WP-Members Membershipllm-fuzzy
Range: =1.2.3

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/132012/WordPress-WP-Membership-1.2.3-Privilege-Escalation.htmlnvdExploit
www.securityfocus.com/archive/1/535587/100/0/threadednvd
www.securityfocus.com/archive/1/535652/100/0/threadednvd
www.securityfocus.com/bid/74766nvd
wpvulndb.com/vulnerabilities/7998nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000