VendorsSimple Membership Pluginsimple_membershipall versions
Vulnerabilities

Simple Membership Plugin Simple Membership

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

20CVEs
CVE-2022-2317
Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation
Published 2022-08-01 · Modified
9.8EPSS 0.014
CVE-2023-41957
WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability
Published 2024-05-17 · Analyzed
9.8EPSS 0.006
CVE-2019-14328
The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.
Published 2019-07-28 · Modified
8.81 PoCEPSS 0.032
CVE-2022-2273
Simple Membership < 4.1.3 - Membership Privilege Escalation
Published 2022-08-01 · Modified
8.8EPSS 0.012
CVE-2023-41956
WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability
Published 2024-05-17 · Analyzed
8.8EPSS 0.007
CVE-2016-10884
The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.
Published 2019-08-14 · Modified
8.8EPSS 0.007
CVE-2024-11088
Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
Published 2024-11-21 · Analyzed
7.5EPSS 0.006
CVE-2023-4719
Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting
Published 2023-09-06 · Modified
7.2EPSS 0.006
CVE-2023-50376
WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)
Published 2023-12-19 · Modified
7.1EPSS 0.005
CVE-2022-0681
Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF
Published 2022-03-21 · Modified
6.5EPSS 0.005
CVE-2024-4383
Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-05-09 · Modified
6.4EPSS 0.004
CVE-2022-1724
Simple Membership < 4.1.1 - Reflected Cross-Site Scripting
Published 2022-06-13 · Modified
6.1EPSS 0.018
CVE-2017-18499
The simple-membership plugin before 3.5.7 for WordPress has XSS.
Published 2019-08-12 · Modified
6.1EPSS 0.009
CVE-2024-1985
Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting
Published 2024-03-13 · Modified
6.1EPSS 0.009
CVE-2023-6882
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode
Published 2024-01-11 · Modified
6.1EPSS 0.004
CVE-2024-22308
WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection
Published 2024-01-24 · Modified
6.1EPSS 0.003
CVE-2024-49682
WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability
Published 2024-10-24 · Modified
6.1EPSS 0.003
CVE-2022-4469
Simple Membership < 4.2.2 - Contributor+ Stored XSS
Published 2023-01-16 · Modified
5.4EPSS 0.005
CVE-2024-3730
Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-04-25 · Modified
5.4EPSS 0.003
CVE-2022-0328
Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF
Published 2022-02-28 · Modified
4.7EPSS 0.005