Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Simple-membership-pluginSimple Membership*

9 matches found

CVE
CVE•added 2024/04/25 11:15 a.m.•55 views

CVE-2024-3730

The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_subscription_cancel_link' shortcode in all versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

5.4CVSS5.7AI score0.00144EPSS
CVE
CVE•added 2024/05/17 7:16 a.m.•51 views

CVE-2023-41957

Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Membership: from n/a through 4.3.4.

9.8CVSS6.8AI score0.00099EPSS
CVE
CVE•added 2024/05/14 3:43 p.m.•51 views

CVE-2024-4383

The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_subscription_cancel_link' shortcode in all versions up to, and including, 4.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.7AI score0.00183EPSS
CVE
CVE•added 2024/01/11 9:15 a.m.•48 views

CVE-2023-6882

The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘environment_mode’ parameter in all versions up to, and including, 4.3.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbi...

6.1CVSS6.2AI score0.01268EPSS
CVE
CVE•added 2024/05/17 7:16 a.m.•47 views

CVE-2023-41956

Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4.

8.8CVSS6.8AI score0.00339EPSS
CVE
CVE•added 2024/10/24 12:15 p.m.•47 views

CVE-2024-49682

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in smp7, wp.Insider Simple Membership allows Phishing.This issue affects Simple Membership: from n/a through 4.5.3.

6.1CVSS5.1AI score0.00057EPSS
CVE
CVE•added 2024/03/13 4:15 p.m.•46 views

CVE-2024-1985

The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Display Name' parameter in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

6.1CVSS5.3AI score0.03287EPSS
CVE
CVE•added 2024/01/24 12:15 p.m.•42 views

CVE-2024-22308

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.4.1.

6.1CVSS6.8AI score0.00097EPSS
CVE
CVE•added 2024/11/21 2:15 p.m.•41 views

CVE-2024-11088

The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher...

7.5CVSS5.3AI score0.00162EPSS