CVE-2021-41472

CVE-2021-41472 concerns the Sourcecodester Simple Membership System v1 by oretnom23. The vulnerability is a SQL injection in the login flow, exploitable via the username and password parameters to execute arbitrary SQL commands. Affected component is the login/authentication handling; underlying ...

CVE-2021-41472

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...

WordPress Simple Membership plugin <= 4.0.3 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Martin Vierula in WordPress Simple Membership plugin versions = 4.0.3. Solution Update the WordPress Simple Membership plugin to the latest available version at least 4.0.4...

File upload vulnerability in Joomla! simpleMembership component

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A file upload vulnerability exists in the Joomla! simpleMembership component. An attacker can exploit the vulnerability to upload malicious files and gain server privileges...

Cross-site scripting vulnerability in Joomla! simpleMembership component

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A cross-site scripting vulnerability exists in the Joomla! simpleMembership component. An attacker can insert malicious js code into the page to obtain user cookies and other...

Wordpress Simple Membership Plugin Cross-Site Request Forgery (CVE-2019-14328)

A cross-site request forgery vulnerability exists in Wordpress Simple Membership Plugin. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user with administrator privileges to visit a page which sends a request to Simple Membership Plugin...

WordPress simple-membership plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. simple-membership plugin is a website membership plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

CVE-2016-10884

The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues...

CVE-2016-10884

CVE-2016-10884 affects the WordPress Simple Membership plugin prior to 3.3.3, with multiple CSRF vulnerabilities. The Red Hat, CVE databases and WP vulnerability feeds consistently describe CSRF flaws in this plugin version. The root cause is improper CSRF protection allowing unauthorized state-c...

CVE-2016-10884

The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues...

WordPress simple-membership plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. simple-membership plugin is a website membership plugin used in it. Cross-site scripting vulnerability exists in WordPress...

PT-2019-7680 · WordPress · Simple Membership

Name of the Vulnerable Software and Affected Versions: simple-membership plugin versions prior to 3.3.3 Description: The issue concerns multiple CSRF problems. Recommendations: For versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

Cross site scripting

The simple-membership plugin before 3.5.7 for WordPress has XSS...

CVE-2017-18499

The CVE-2017-18499 entry affects the WordPress Simple Membership plugin (pre-3.5.7). The root cause is an XSS flaw in the plugin’s handling of client-side data without proper validation, enabling injection of client-side scripts. The impact is cross-site scripting within WordPress sites using thi...

CVE-2017-18499

The simple-membership plugin before 3.5.7 for WordPress has XSS...

PT-2019-8434 · WordPress · Simple Membership

Name of the Vulnerable Software and Affected Versions: simple-membership plugin versions prior to 3.5.7 Description: The issue is related to a cross-site scripting XSS problem. Recommendations: For versions prior to 3.5.7, update to version 3.5.7 or later to resolve the issue...

WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery

WordPress Plugin Simple Membership 3.8.4 - Cross-Site Request Forgery Exploit Title: Cross Site Request Forgery in Wordpress Simple Membership plugin Date: 2019-07-27 Exploit Author: rubyman Vendor Homepage: https://wordpress.org/plugins/simple-membership/ wpvulndb :...

WordPress Simple Membership Plugin < 3.8.5 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Cross Site Request Forgery in Wordpress Simple Membership plugin Exploit Author: rubyman Vendor Homepage: https://wordpress.org/plugins/simple-membership/ wpvulndb : https://wpvulndb.com/vulnerabilities/9482 Version: 3.8.4 Teste...