Skip to contentSimple-membership-plugin Simple Membership vulnerabilities
- mra13 simple membershipSimple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized ActorCVE-2024-110885.3 Medium
- simple-membership-plugin simple membershipWordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerabilityCVE-2024-496824.7 Medium
- simple-membership-plugin simple membershipWordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerabilityCVE-2023-419578.6 High
- simple-membership-plugin simple membershipWordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerabilityCVE-2023-419568.8 High
- simple-membership-plugin simple membershipSimple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-43836.4 Medium
- simple-membership-plugin simple membershipSimple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-37305.4 Medium
- simple-membership-plugin simple membershipSimple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site ScriptingCVE-2024-19854.7 Medium
- simple-membership-plugin simple membershipWordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open RedirectionCVE-2024-223083.4 Low
- simple-membership-plugin simple membershipSimple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_modeCVE-2023-68826.1 Medium
- simple-membership-plugin simple membershipWordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)CVE-2023-503767.1 High
- simple-membership-plugin simple membershipSimple Membership <= 4.3.5 - Reflected Cross-Site ScriptingCVE-2023-47197.2 High
- simple-membership-plugin simple membershipSimple Membership < 4.2.2 - Contributor+ Stored XSSCVE-2022-44695.4 Medium
- simple-membership-plugin simple membership wp user importSimple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL InjectionCVE-2023-02547.2 High
- simple-membership-plugin simple membershipSimple Membership < 4.1.3 - Unauthenticated Membership Privilege EscalationCVE-2022-23179.8 Critical
- simple-membership-plugin simple membershipSimple Membership < 4.1.3 - Membership Privilege EscalationCVE-2022-22738.8 High
- simple-membership-plugin simple membershipSimple Membership < 4.1.1 - Reflected Cross-Site ScriptingCVE-2022-17246.1 Medium
- simple-membership-plugin simple membershipSimple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRFCVE-2022-06816.5 Medium
- simple-membership-plugin simple membershipSimple Membership < 4.0.9 - Arbitrary Member Deletion via CSRFCVE-2022-03284.7 Medium
- simple-membership-plugin simple membershipThe simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.CVE-2016-108848.8 High
- simple-membership-plugin simple membershipThe simple-membership plugin before 3.5.7 for WordPress has XSS.CVE-2017-184996.1 Medium
- simple-membership-plugin simple membershipThe Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation...CVE-2019-14328Public exploit8.8 High