Skip to content
OpenAdvisories

Vendor

mpvanwinkle77

1 known vulnerabilities.

Products

Simplr Registration Form Plus+ 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-4213

    Simplr Registration Form Plus+ <= 2.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change

    The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.4.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and …

    mpvanwinkle77 Simplr Registration Form Plus+ Web / CMS