Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:18 a.m.3 views

CVE-2023-41957

Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Membership: from n/a through 4.3.4...

9.8CVSS6.9AI score0.00135EPSS
Exploits0
Cvelist
Cvelist
added 2024/10/10 6:9 p.m.14 views

CVE-2024-47354 WordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirection: from n/a through = 1.6...

4.7CVSS0.003EPSS
Exploits0References1
NVD
NVD
added 2024/05/17 7:16 a.m.11 views

CVE-2023-41957

Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Membership: from n/a through 4.3.4...

9.8CVSS8.7AI score0.00135EPSS
Exploits0References1
NVD
NVD
added 2024/05/17 7:16 a.m.14 views

CVE-2023-41956

Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4...

8.8CVSS8.8AI score0.00461EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/17 6:55 a.m.24 views

CVE-2023-41956 WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability

Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4...

8.8CVSS6.9AI score0.00461EPSS
Exploits0References1
CVE
CVE
added 2024/01/24 11:59 a.m.49 views

CVE-2024-22308

CVE-2024-22308 affects the WordPress Simple Membership plugin (versions through 4.4.1). The issue is an open redirect vulnerability in the plugin’s redirect mechanism, allowing unauthenticated attackers to redirect users to untrusted sites. Practical impact is open redirects rather than code exec...

6.1CVSS7AI score0.00097EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/12/19 9:15 a.m.9 views

CVE-2023-50376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smp7, wp.Insider Simple Membership allows Reflected XSS.This issue affects Simple Membership: from n/a through 4.3.8...

7.1CVSS0.00128EPSS
Exploits0References1
Rows per page
Query Builder