Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
simple membership vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2021-41472
SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows malicious users to execute arbitrary SQL commands via the username and password parameters.
Simple Membership System Using Php And Ajax Project Simple Membership System Using Php And Ajax 1.0
6.8
CVSSv2
CVE-2016-10884
The simple-membership plugin prior to 3.3.3 for WordPress has multiple CSRF issues.
Simple-membership-plugin Simple Membership
6.8
CVSSv2
CVE-2019-14328
The Simple Membership plugin prior to 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.
Simple-membership-plugin Simple Membership
1 EDB exploit
4.3
CVSSv2
CVE-2022-1724
The Simple Membership WordPress plugin prior to 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting
Simple-membership-plugin Simple Membership
4.3
CVSSv2
CVE-2022-0681
The Simple Membership WordPress plugin prior to 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow malicious users to make a logged in admin delete arbitrary transactions via a CSRF attack
Simple-membership-plugin Simple Membership
4.3
CVSSv2
CVE-2022-0328
The Simple Membership WordPress plugin prior to 4.0.9 does not have CSRF check when deleting members in bulk, which could allow malicious users to make a logged in admin delete them via a CSRF attack
Simple-membership-plugin Simple Membership
4.3
CVSSv2
CVE-2020-1971
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...
Openssl Openssl
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Fedoraproject Fedora 32
Fedoraproject Fedora 33
Oracle Api Gateway 11.1.2.4.0
Oracle Peoplesoft Enterprise Peopletools 8.56
Oracle Business Intelligence 12.2.1.3.0
Oracle Peoplesoft Enterprise Peopletools 8.57
Oracle Jd Edwards World Security A9.4
Oracle Business Intelligence 12.2.1.4.0
Oracle Enterprise Manager Base Platform 13.3.0.0
Oracle Business Intelligence 5.5.0.0.0
Oracle Peoplesoft Enterprise Peopletools 8.58
Oracle Enterprise Manager Base Platform 13.4.0.0
Oracle Http Server 12.2.1.4.0
Oracle Enterprise Manager For Storage Management 13.4.0.0
Oracle Enterprise Manager Ops Center 12.4.0.0
Oracle Mysql
Oracle Graalvm 19.3.4
Oracle Graalvm 20.3.0
Oracle Essbase 21.2
5 Github repositories
1 Article
4.3
CVSSv2
CVE-2017-18499
The simple-membership plugin prior to 3.5.7 for WordPress has XSS.
Simple-membership-plugin Simple Membership
NA
CVE-2023-41956
Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a up to and including 4.3.4.
NA
CVE-2023-41957
Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Membership: from n/a up to and including 4.3.4.
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5248
CVE-2024-3110
CVE-2024-5552
CVE-2024-29415
HTML injection
CVE-2024-3095
TCP
type confusion
CVE-2024-1800
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »