CVE-2024-11088 Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor

The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to...

CVE-2024-11088 Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor

The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to...

WordPress plugin Simple Membership 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Simple Membership Plugin <= 4.5.5 is vulnerable to Sensitive Data Exposure

Software Simple Membership Type Plugin Vulnerable versions = 4.5.5 Fixed in 4.5.6 OWASP Top 10 A6: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-11088 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 18decf29b61f Credits Francesco Carlucci...

PT-2024-16749 · WordPress · Simple Membership

Name of the Vulnerable Software and Affected Versions: The Simple Membership plugin for WordPress versions up to, and including, 4.5.5 Description: The issue allows unauthenticated attackers to extract sensitive data from restricted posts via the WordPress core search feature. This makes it...

CVE-2024-49682

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in smp7, wp.Insider Simple Membership allows Phishing.This issue affects Simple Membership: from n/a through 4.5.3...

CVE-2024-49682

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through = 4.5.3...

CVE-2024-49682

CVE-2024-49682 is an Open Redirect vulnerability in the WordPress plugin Simple Membership (versions ≤ 4.5.3). The issue allows redirection to untrusted sites, enabling phishing scenarios as described in multiple sources. Public docs consistently name the affected component as the Simple Membersh...

CVE-2024-49682 WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through = 4.5.3...

CVE-2024-49682 WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through = 4.5.3...

WordPress plugin Simple Membership 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

PT-2024-33635 · Unknown · Simple Membership

Name of the Vulnerable Software and Affected Versions: Simple Membership versions through 4.5.3 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, in Simple Membership. This vulnerability allows phishing attacks...

WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Simple Membership versions = 4.5.3...

WordPress Simple Membership Plugin <= 4.5.3 is vulnerable to Open Redirection

Software Simple Membership Type Plugin Vulnerable versions = 4.5.3 Fixed in 4.5.4 OWASP Top 10 A3: Injection Classification Open Redirection CVE CVE-2024-49682 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 0c7afbddabf9 Credits Muhamad Agil Fachrian Required privilege...

CVE-2024-47354

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirection: from n/a through = 1.6...

CVE-2024-47354 WordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirection: from n/a through = 1.6...

CVE-2024-47354 WordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirection: from n/a through = 1.6...

CVE-2024-47354

CVE-2024-47354 : WordPress plugin Simple Membership After Login Redirection has an open redirect vulnerability in versions

PT-2024-32570 · WordPress · Simple Membership After Login Redirection

Name of the Vulnerable Software and Affected Versions: Simple Membership After Login Redirection versions 1.6 and earlier Description: A high-severity open redirection vulnerability has been identified, allowing URL redirection to untrusted sites. This issue affects the WordPress Simple Membershi...

WordPress plugin Simple Membership After Login Redirection 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error...