Skip to content
OpenAdvisories
Unscored CVE-2022-2317 EUVD-2022-34587GHSA-r2wm-jmvh-5q98

Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation

Published Aug 1, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user supplied parameter.

Affected products

VendorProductAffectedFixed
— Simple Membership 4.1.3 – < 4.1.3 4.1.3

References