Simple-membership-plugin vulnerabilities

Products

• Simple Membership 20

Newest

• mra13 simple membership Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor CVE-2024-11088 5.3 MediumNovember 21, 2024
• simple-membership-plugin simple membership WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability CVE-2024-49682 4.7 MediumOctober 24, 2024
• simple-membership-plugin simple membership WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability CVE-2023-41957 8.6 HighMay 17, 2024
• simple-membership-plugin simple membership WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability CVE-2023-41956 8.8 HighMay 17, 2024
• simple-membership-plugin simple membership Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-4383 6.4 MediumMay 9, 2024
• simple-membership-plugin simple membership Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-3730 5.4 MediumApril 25, 2024
• simple-membership-plugin simple membership Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting CVE-2024-1985 4.7 MediumMarch 13, 2024
• simple-membership-plugin simple membership WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection CVE-2024-22308 3.4 LowJanuary 24, 2024
• simple-membership-plugin simple membership Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode CVE-2023-6882 6.1 MediumJanuary 11, 2024
• simple-membership-plugin simple membership WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS) CVE-2023-50376 7.1 HighDecember 19, 2023
• simple-membership-plugin simple membership Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting CVE-2023-4719 7.2 HighSeptember 6, 2023
• simple-membership-plugin simple membership Simple Membership < 4.2.2 - Contributor+ Stored XSS CVE-2022-4469 5.4 MediumJanuary 16, 2023
• simple-membership-plugin simple membership wp user import Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection CVE-2023-0254 7.2 HighJanuary 12, 2023
• simple-membership-plugin simple membership Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation CVE-2022-2317 9.8 CriticalAugust 1, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.3 - Membership Privilege Escalation CVE-2022-2273 8.8 HighAugust 1, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.1 - Reflected Cross-Site Scripting CVE-2022-1724 6.1 MediumJune 13, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF CVE-2022-0681 6.5 MediumMarch 21, 2022
• simple-membership-plugin simple membership Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF CVE-2022-0328 4.7 MediumFebruary 28, 2022
• simple-membership-plugin simple membership The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues. CVE-2016-10884 8.8 HighAugust 14, 2019
• simple-membership-plugin simple membership The simple-membership plugin before 3.5.7 for WordPress has XSS. CVE-2017-18499 6.1 MediumAugust 12, 2019
• simple-membership-plugin simple membership The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation... CVE-2019-14328 Public exploit 8.8 HighJuly 28, 2019