Indeed Membership Pro

Indeed Membership Pro has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 10 are fixed as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 4 high. 2020 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (20%). Other recurring categories include Missing Authorization, Cross-Site Scripting.

Every one of the 10 issues recorded for Indeed Membership Pro has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSHigh

8.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Indeed Membership Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-43240

Indeed Membership Pro <= 12.7 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

10 records


2026-03-23 00:00	Indeed Membership Pro <= 13.7 - Missing Authorization Indeed Membership Pro <= 13.7	`CVE-2026-25357`	5.3 Medium	Phat RiO	Yes
2024-08-12 00:00	Indeed Membership Pro <= 12.7 - Unauthenticated PHP Object Injection Indeed Membership Pro <= 12.7	`CVE-2024-43242`	8.1 High	Rafie Muhammad	Yes
2024-08-12 00:00	Indeed Membership Pro <= 12.7 - Unauthenticated Privilege Escalation Indeed Membership Pro <= 12.7	`CVE-2024-43240`	9.8 Critical	Rafie Muhammad	Yes
2024-08-12 00:00	Indeed Membership Pro <= 12.7 - Reflected Cross-Site Scripting Indeed Membership Pro <= 12.7	`CVE-2024-43241`	6.1 Medium	Rafie Muhammad	Yes
2020-02-24 00:00	Ultimate Membership Pro <= 8.6 - Cross-Site Request Forgery Indeed Membership Pro < 8.7	`N/A`	8.8 High	Erwan LR	Yes
2020-02-24 00:00	Ultimate Membership Pro <= 8.6.1 - Cross-Site Request Forgery Indeed Membership Pro < 8.6.2	`N/A`	8.8 High	Erwan LR	Yes
2020-02-06 00:00	Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass Indeed Membership Pro 7.3 – < 8.6.1	`CVE-2020-36832`	9.8 Critical	Noman Riffat	Yes
2020-02-06 00:00	Indeed Membership Pro 7.3 - 8.6 - Missing Authorization Checks Indeed Membership Pro 7.3 – 8.6	`CVE-2020-36833`	6.3 Medium	Norman Riffat	Yes
2019-02-26 00:00	Indeed Membership Pro <= 7.5 - Remote Image File Inclusion Indeed Membership Pro <= 7.5	`N/A`	8.3 High	James Fraser	Yes
2019-02-26 00:00	Indeed Membership Pro <= 7.5 - Arbitrary File Upload Indeed Membership Pro <= 7.5	`N/A`	9.8 Critical	James Fraser	Yes

Showing 1–10 of 10 reports