simple-membership-plugin vulnerabilities

Recent CVEs affecting simple-membership-plugin products. 5 tracked.

simple-membership-plugin has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-11-21. Highest priority: CVE-2023-41957 (score 49/100).

• CVE-2024-4383 MEDIUM 6.4 UPGRADE The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm
• CVE-2024-49682 MEDIUM 4.7 UPGRADE URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membe
• CVE-2024-11088 MEDIUM 5.3 UPGRADE The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
• CVE-2023-41957 HIGH 8.6 UPGRADE Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.
• CVE-2023-41956 HIGH 8.8 UPGRADE Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membersh

FAQ

How do I fix simple-membership-plugin vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is simple-membership-plugin being exploited right now?

None of the tracked simple-membership-plugin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which simple-membership-plugin CVE should I patch first?

CVE-2023-41957 currently ranks highest (49/100): Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation..

Products

• simple membership

RSS feed for simple-membership-plugin · ← Back to latest CVEs