Unscored CVE-2017-1002009 EUVD-2017-1624GHSA-92r5-7cvr-68j4

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulne…

Published Sep 14, 2017 · Updated Sep 17, 2024 · Assigned by larry_cashdollar

Description

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function.

References

http://www.vapidlabs.com/advisory.php?v=188
http://membership.officeautopilot.com/get-it-now/