CVE-2014-3849

Published: May 23, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbitrary users via a request containing a user name in the Email parameter and the API key in the i4w_clearuser parameter.

Affected (5)

Products: Imember360: Imember360

Imember360

1 product

Imember360

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Imember360 Imember360	Version 3.8.012
Imember360 Imember360	Version 3.8.013
Imember360 Imember360	Version 3.8.014
Imember360 Imember360	Version 3.9.000
Imember360 Imember360	Version 3.9.001