Skip to content
OpenAdvisories
Unscored CVE-2017-1002010 EUVD-2017-1625GHSA-qmjg-fj6g-53mc

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulne…

Published Sep 14, 2017 · Updated Sep 16, 2024 · Assigned by larry_cashdollar

Description

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete_media function.

Affected products

VendorProductAffectedFixed
ontraport Membership Simplified unspecified – < 1.58 1.58

References