Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and ha…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.16927·Published 2017-09-14·Fixed in 1.58CWE-434