https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-1002010.htmlhttps://patchthecve.com/cve/CVE-2017-1002010.htmlWed, 17 Jun 2026 00:59:20 +0000CRITICAL 9.8: Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete_media function.https://patchthecve.com/cve/CVE-2017-1002009.htmlhttps://patchthecve.com/cve/CVE-2017-1002009.htmlWed, 17 Jun 2026 00:59:20 +0000CRITICAL 9.8: Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function.https://patchthecve.com/cve/CVE-2017-1002008.htmlhttps://patchthecve.com/cve/CVE-2017-1002008.htmlWed, 17 Jun 2026 00:59:20 +0000CRITICAL 9.8: Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.