İçeriğe atla
Noroxi

Simple Membership

simple-membership · eklenti

Simple Membership için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

23 bilinen açık

1 kritik · 1 kayıt için istismar kodu yayımlanmış · son kayıt 17 Eyl 2026

Güvenlik açıkları

  • CVE-2023-41957

    WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability

    Kritik 9.8

  • CVE-2023-41956

    WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability

    Yüksek 8.8

  • CVE-2016-10884

    The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.

    Yüksek 8.8

  • CVE-2019-14328

    The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.

    Yüksek 8.8

  • CVE-2026-66712

    WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability

    Yüksek 7.5

  • CVE-2026-34886

    WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability

    Yüksek 7.5

  • CVE-2024-11088

    Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor

    Yüksek 7.5

  • CVE-2026-42663

    WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2026-1461

    Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values

    Orta 6.5

  • CVE-2024-49682

    WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

    Orta 6.1

  • CVE-2024-1985

    Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting

    Orta 6.1

  • CVE-2024-22308

    WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection

    Orta 6.1

  • CVE-2023-6882

    Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode

    Orta 6.1

  • CVE-2023-50376

    WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)

    Orta 6.1

  • CVE-2023-4719

    Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting

    Orta 6.1

  • CVE-2017-18499

    The simple-membership plugin before 3.5.7 for WordPress has XSS.

    Orta 6.1

  • CVE-2025-49333

    WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability

    Orta 5.9

  • CVE-2024-4383

    Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    Orta 5.4

  • CVE-2024-3730

    Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    Orta 5.4

  • CVE-2026-74000

    WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

    Orta 5.3

  • CVE-2026-77194

    Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding

    Orta 5.3

  • CVE-2026-12093

    Simple Membership <= 4.7.5 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook

    Orta 5.3

  • CVE-2026-25308

    WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

    Orta 4.3

← Dizine dön