Skip to content
OpenAdvisories

Vendor

smp7, wp.insider

4 known vulnerabilities.

Products

Simple Membership 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2023-41957

    WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Membership: from n/a through 4.3.4.

    smp7, wp.insider Simple Membership
  • High 8.8
    CVE-2023-41956

    WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability

    Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4.

    smp7, wp.insider Simple Membership
  • High 7.1
    CVE-2023-50376

    WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in smp7, wp.Insider Simple Membership allows Reflected XSS.This issue affects Simple Membership: from n/a through 4.3.8.

    smp7, wp.insider Simple Membership