Vulnerabilities > Simple Membership Plugin > Simple Membership > 4.1.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-08-01 | CVE-2022-2273 | Unspecified vulnerability in Simple-Membership-Plugin Simple Membership The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request. | 8.8 |
2022-08-01 | CVE-2022-2317 | Unspecified vulnerability in Simple-Membership-Plugin Simple Membership The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user supplied parameter. | 9.8 |