CVE-2014-8948

no score yetEPSS 3.7%

imember360 imember360: no CVSS score yet. EPSS 3.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote attackers to hijack the authentication of administrators for requests that with an unspecified impact via the i4w_trace parameter. NOTE: this can be leveraged with CVE-2014-8948 to execute arbitrary commands.

EPSS: 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2014-11-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

imember360:imember360

References

http://osvdb.org/show/osvdb/106301
http://packetstormsecurity.com/files/126324/WordPress-iMember360is-3.9.001-XSS-Disclosure-Code-Execution.html
http://seclists.org/fulldisclosure/2014/Apr/265
http://secunia.com/advisories/58094
http://www.exploit-db.com/exploits/33076

Check your stack JSON