smp7, wp.insider

Products

ProductCVEsExploitedLatest
Simple Membership4–May 17, 2024

Exploited and recent CVEs

  • CVE-2023-41957 High 8.6 WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability 0.8%
  • CVE-2023-41956 High 8.8 WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability 0.9%
  • CVE-2024-22308 Low 3.4 WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection 0.3%
  • CVE-2023-50376 High 7.1 WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS) 0.5%