PT-2022-13108

Name of the Vulnerable Software and Affected Versions Simple Membership WordPress plugin versions prior to 4.0.9 Description The issue concerns a lack of CSRF check when deleting members in bulk. This could allow attackers to make a logged-in admin delete members via a CSRF attack. Recommendation...