Read the docs

wpinsider-1

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

wpinsider-1 records in CISA KEV

No wpinsider-1 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Simple Membership 20 records MEDIUM Simple Membership Wp User Import 1 record LOW

Records

1 record in Simple Membership Wp User Import · all components

TI-2023-00240 CVE-2023-0254 · GHSA-r4cq-hxmv-g6f2

Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection

Priority LOW 35

The Simple Membership WP user Import plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in versions up to, and including, 1.7 due to insufficient escaping on the user supplied parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00921 Published 2023-01-12 No fix listed CWE-89
Open these records in search →