PatchTheCVEsimple membership vulnerabilities and fixes
Recent CVEs affecting simple membership, with upgrade or downgrade steps. 5 tracked.
Also searched as: simplemembership.
simple membership has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-11-21. Highest priority: CVE-2023-41957 (score 49/100).
- CVE-2024-4383 MEDIUM 6.4 UPGRADE The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm
- CVE-2024-49682 MEDIUM 4.7 UPGRADE URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membe
- CVE-2024-11088 MEDIUM 5.3 UPGRADE The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
- CVE-2023-41957 HIGH 8.6 UPGRADE Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.
- CVE-2023-41956 HIGH 8.8 UPGRADE Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membersh
FAQ
How do I fix simple membership vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simple membership being exploited right now?
None of the tracked simple membership CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simple membership CVE should I patch first?
CVE-2023-41957 currently ranks highest (49/100): Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation..