Vulnerabilities (CVE)

Filtered by vendor Simple-membership-plugin Subscribe
Filtered by product Simple Membership
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-50376 1 Simple-membership-plugin 1 Simple Membership 2023-12-22 N/A 6.1 MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in smp7, wp.Insider Simple Membership allows Reflected XSS.This issue affects Simple Membership: from n/a through 4.3.8.
CVE-2022-1724 1 Simple-membership-plugin 1 Simple Membership 2022-06-17 4.3 MEDIUM 6.1 MEDIUM
The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting
CVE-2017-18499 1 Simple-membership-plugin 1 Simple Membership 2019-09-07 4.3 MEDIUM 6.1 MEDIUM
The simple-membership plugin before 3.5.7 for WordPress has XSS.
CVE-2016-10884 1 Simple-membership-plugin 1 Simple Membership 2019-09-06 6.8 MEDIUM 8.8 HIGH
The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues.
CVE-2019-14328 1 Simple-membership-plugin 1 Simple Membership 2019-08-05 6.8 MEDIUM 8.8 HIGH
The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.