CVE-2026-24986 WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through = 1.9.1...

EUVD-2026-5248

Cross-Site Request Forgery CSRF vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through = 1.9.1...

CVE-2026-24986

The CVE-2026-24986 entry concerns the WordPress plugin Simple Membership WP user Import (versions

PT-2026-6234

Name of the Vulnerable Software and Affected Versions Simple Membership WP user Import versions through 1.9.1 Description The Simple Membership WP user Import software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to potentially perform actions on behalf of...

WordPress plugin Simple Membership WP user Import 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Simple Membership WP user Import versions = 1.9.1...

WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Andrea Bocchetti in WordPress Plugin Simple Membership versions = 4.6.9...

CVE-2016-10884

The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues...

CVE-2022-0681

The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attack...

CVE-2023-4845

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file accounteditquery.php. The manipulation of the argument adminid leads to sql injection. The attack can be initiated remotely. The exploit...

CVE-2023-4719

The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the listtype parameter in versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. Using this vulnerability, unauthenticated attackers could inject arbitrary web...

EUVD-2017-9615

Malware in sbrugna...

EUVD-2019-5547

Malware in sbrugna...

EUVD-2016-1878

Malware in sbrugna...

EUVD-2024-44016

Malicious code in bioql PyPI...

EUVD-2021-28498

Malicious code in bioql PyPI...

EUVD-2022-15766

Malicious code in bioql PyPI...

EUVD-2023-57584

Malicious code in bioql PyPI...

EUVD-2024-43538

Malicious code in bioql PyPI...

EUVD-2023-46415

Malicious code in bioql PyPI...