PT-2019-7680 · WordPress · Simple Membership

Name of the Vulnerable Software and Affected Versions: simple-membership plugin versions prior to 3.3.3 Description: The issue concerns multiple CSRF problems. Recommendations: For versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

Cross site scripting

The simple-membership plugin before 3.5.7 for WordPress has XSS...

CVE-2017-18499

The CVE-2017-18499 entry affects the WordPress Simple Membership plugin (pre-3.5.7). The root cause is an XSS flaw in the plugin’s handling of client-side data without proper validation, enabling injection of client-side scripts. The impact is cross-site scripting within WordPress sites using thi...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

PT-2019-8434 · WordPress · Simple Membership

Name of the Vulnerable Software and Affected Versions: simple-membership plugin versions prior to 3.5.7 Description: The issue is related to a cross-site scripting XSS problem. Recommendations: For versions prior to 3.5.7, update to version 3.5.7 or later to resolve the issue...

CVE-2019-12265

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report...

PT-2019-4743 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.5 through 6.9.4 Description: The issue is related to a memory leak in the IGMPv3 client component, which can lead to an information leak via IGMPv3 specific membership reports. This can potentially allow an...

WordPress Simple Membership plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Simple Membership plugin is used in one of the website membership plugin. A cross-site request forgery vulnerability exists in the Bulk...

WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery

WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery Exploit Title: Cross Site Request Forgery in Wordpress Simple Membership plugin Date: 2019-07-27 Exploit Author: rubyman Vendor Homepage: https://wordpress.org/plugins/simple-membership/ wpvulndb :...

WordPress Simple Membership plugin <= 3.8.4 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by rubyman in WordPress Simple Membership plugin versions = 3.8.4. Solution Update the WordPress Simple Membership plugin to the latest available version at least 3.8.5...

WordPress Simple Membership 3.8.4 Cross Site Request Forgery

Exploit Title: Cross Site Request Forgery in Wordpress Simple Membership plugin Date: 2019-07-27 Exploit Author: rubyman Vendor Homepage: https://wordpress.org/plugins/simple-membership/ wpvulndb : https://wpvulndb.com/vulnerabilities/9482 Version: 3.8.4 Tested on: Windows 8.1 CVE : CVE-2019-1432...

WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery

Exploit Title: Cross Site Request Forgery in Wordpress Simple Membership plugin Date: 2019-07-27 Exploit Author: rubyman Vendor Homepage: https://wordpress.org/plugins/simple-membership/ wpvulndb : https://wpvulndb.com/vulnerabilities/9482 Version: 3.8.4 Tested on: Windows 8.1 CVE : CVE-2019-1432...

WordPress Simple Membership Plugin < 3.8.5 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Cross Site Request Forgery in Wordpress Simple Membership plugin Exploit Author: rubyman Vendor Homepage: https://wordpress.org/plugins/simple-membership/ wpvulndb : https://wpvulndb.com/vulnerabilities/9482 Version: 3.8.4 Teste...

CVE-2019-14328

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section...

CVE-2019-14328

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section...

Design/Logic Flaw

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section...

CVE-2019-14328

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section...

CVE-2019-14328

The CVE-2019-14328 entry covers a CSRF vulnerability in WordPress Simple Membership plugin up to version 3.8.4, affecting the Bulk Operation feature. Technical details in connected docs show an attacker can abuse CSRF to trigger unintended bulk membership changes by convincing a site administrato...