PatchTheCVEyourmembers vulnerabilities and fixes
Recent CVEs affecting yourmembers, with upgrade or downgrade steps. 1 tracked.
yourmembers has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-01-13. Highest priority: CVE-2014-100003 (score 54/100).
- CVE-2014-100003 HIGH 7.5 MITIGATE SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plug
FAQ
How do I fix yourmembers vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yourmembers being exploited right now?
None of the tracked yourmembers CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yourmembers CVE should I patch first?
CVE-2014-100003 currently ranks highest (54/100): SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plug.