simple-membership-plugin records

21 published records for vendor simple-membership-plugin.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 23.8%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

21 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-2317No exploit	Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalationsimple-membership-plugin · simple membership · CWE-269 Pre-auth	Critical9.8	—	1.3%	Aug 1, 2022
39Monitor	CVE-2023-41957No exploit	WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerabilitysimple-membership-plugin · simple membership · CWE-269 Pre-auth	Critical9.8	—	0.7%	May 17, 2024
36Monitor	CVE-2019-14328Proof of concept	The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.simple-membership-plugin · simple membership · CWE-352 Pre-auth CSRF	High8.8	—	3.1%	Jul 28, 2019
35Monitor	CVE-2022-2273No exploit	Simple Membership < 4.1.3 - Membership Privilege Escalationsimple-membership-plugin · simple membership · CWE-269	High8.8	—	1.1%	Aug 1, 2022
35Monitor	CVE-2023-41956No exploit	WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerabilitysimple-membership-plugin · simple membership · CWE-287 Auth bypass	High8.8	—	0.9%	May 17, 2024
35Monitor	CVE-2016-10884No exploit	The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.simple-membership-plugin · simple membership · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Aug 14, 2019
30Monitor	CVE-2024-11088No exploit	Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actorsimple-membership-plugin · simple membership · CWE-200 Pre-auth Info leak	High7.5	—	0.6%	Nov 21, 2024
26Monitor	CVE-2022-0681No exploit	Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRFsimple-membership-plugin · simple membership · CWE-352 Pre-auth CSRF	Medium6.5	—	0.5%	Mar 21, 2022
25Monitor	CVE-2022-1724Proof of concept	Simple Membership < 4.1.1 - Reflected Cross-Site Scriptingsimple-membership-plugin · simple membership · CWE-79 Pre-auth XSS	Medium6.1	—	1.8%	Jun 13, 2022
24Monitor	CVE-2017-18499No exploit	The simple-membership plugin before 3.5.7 for WordPress has XSS.simple-membership-plugin · simple membership · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	Aug 12, 2019
24Monitor	CVE-2024-1985No exploit	Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scriptingsimple-membership-plugin · simple membership · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Mar 13, 2024
24Monitor	CVE-2023-4719No exploit	Simple Membership <= 4.3.5 - Reflected Cross-Site Scriptingsimple-membership-plugin · simple membership · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Sep 5, 2023
24Monitor	CVE-2023-50376No exploit	WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)simple-membership-plugin · simple membership · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 19, 2023
24Monitor	CVE-2023-6882No exploit	Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_modesimple-membership-plugin · simple membership · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jan 11, 2024
24Monitor	CVE-2024-22308No exploit	WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirectionsimple-membership-plugin · simple membership · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.2%	Jan 24, 2024
24Monitor	CVE-2024-49682No exploit	WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerabilitysimple-membership-plugin · simple membership · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.2%	Oct 24, 2024
21Monitor	CVE-2022-4469No exploit	Simple Membership < 4.2.2 - Contributor+ Stored XSSsimple-membership-plugin · simple membership · CWE-79 XSS	Medium5.4	—	0.5%	Jan 16, 2023
21Monitor	CVE-2024-4383No exploit	Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodesimple-membership-plugin · simple membership · CWE-79 XSS	Medium5.4	—	0.4%	May 14, 2024
21Monitor	CVE-2024-3730No exploit	Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodesimple-membership-plugin · simple membership · CWE-79 XSS	Medium5.4	—	0.3%	Apr 25, 2024
19Monitor	CVE-2023-0254No exploit	Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injectionsimple-membership-plugin · simple membership wp user import · CWE-89 SQL injection	Medium4.9	—	0.9%	Jan 12, 2023
18Monitor	CVE-2022-0328No exploit	Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRFsimple-membership-plugin · simple membership · CWE-352 Pre-auth CSRF	Medium4.7	—	0.4%	Feb 28, 2022

CVE-2022-2317
39Monitor
Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
simple-membership-plugin · simple membershipAug 1, 2022
CVE-2023-41957
39Monitor
WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
simple-membership-plugin · simple membershipMay 17, 2024
CVE-2019-14328
36Monitor
The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.
HighCVSS 8.8Proof of conceptEPSS 3%
- Pre-auth
- CSRF
simple-membership-plugin · simple membershipJul 28, 2019
CVE-2022-2273
35Monitor
Simple Membership < 4.1.3 - Membership Privilege Escalation
HighCVSS 8.8No exploitEPSS 1%
simple-membership-plugin · simple membershipAug 1, 2022
CVE-2023-41956
35Monitor
WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
simple-membership-plugin · simple membershipMay 17, 2024
CVE-2016-10884
35Monitor
The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
simple-membership-plugin · simple membershipAug 14, 2019
CVE-2024-11088
30Monitor
Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
simple-membership-plugin · simple membershipNov 21, 2024
CVE-2022-0681
26Monitor
Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
simple-membership-plugin · simple membershipMar 21, 2022
CVE-2022-1724
25Monitor
Simple Membership < 4.1.1 - Reflected Cross-Site Scripting
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
simple-membership-plugin · simple membershipJun 13, 2022
CVE-2017-18499
24Monitor
The simple-membership plugin before 3.5.7 for WordPress has XSS.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
simple-membership-plugin · simple membershipAug 12, 2019
CVE-2024-1985
24Monitor
Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
simple-membership-plugin · simple membershipMar 13, 2024
CVE-2023-4719
24Monitor
Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
simple-membership-plugin · simple membershipSep 5, 2023
CVE-2023-50376
24Monitor
WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
simple-membership-plugin · simple membershipDec 19, 2023
CVE-2023-6882
24Monitor
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
simple-membership-plugin · simple membershipJan 11, 2024
CVE-2024-22308
24Monitor
WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- Open redirect
simple-membership-plugin · simple membershipJan 24, 2024
CVE-2024-49682
24Monitor
WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- Open redirect
simple-membership-plugin · simple membershipOct 24, 2024
CVE-2022-4469
21Monitor
Simple Membership < 4.2.2 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 0%
- XSS
simple-membership-plugin · simple membershipJan 16, 2023
CVE-2024-4383
21Monitor
Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
simple-membership-plugin · simple membershipMay 14, 2024
CVE-2024-3730
21Monitor
Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
simple-membership-plugin · simple membershipApr 25, 2024
CVE-2023-0254
19Monitor
Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection
MediumCVSS 4.9No exploitEPSS 0%
- SQL injection
simple-membership-plugin · simple membership wp user importJan 12, 2023
CVE-2022-0328
18Monitor
Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF
MediumCVSS 4.7No exploitEPSS 0%
- Pre-auth
- CSRF
simple-membership-plugin · simple membershipFeb 28, 2022