Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Simple_membership
(Simple\-Membership\-Plugin)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 13 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-03-21 | CVE-2022-0681 | The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attack | Simple_membership | 6.5 | ||
| 2022-02-28 | CVE-2022-0328 | The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack | Simple_membership | 4.7 | ||
| 2019-07-28 | CVE-2019-14328 | The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section. | Simple_membership | 8.8 |