Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Simple Membership 4.1.3 Clear all filters
TI-2022-02140 CVE-2022-2317 · GHSA-r2wm-jmvh-5q98

Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation

Priority MEDIUM 45

The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user supplied parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01393 Published 2022-08-01 Fixed in 4.1.3 CWE-269
TI-2022-02098 CVE-2022-2273 · GHSA-hfj7-fhvx-37c9

Simple Membership < 4.1.3 - Membership Privilege Escalation

Priority MEDIUM 40

The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST requ…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0118 Published 2022-08-01 Fixed in 4.1.3 CWE-269