Vendor
smp7, wp.insider
21 known vulnerabilities in products by smp7, wp.insider, 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-14328 | Simple Membership Plugin Simple Membership: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Critical | CVE-2022-2317 | Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation | 9.8 | |
| High | CVE-2022-2273 | Simple Membership < 4.1.3 - Membership Privilege Escalation | 8.8 | |
| Medium | CVE-2022-1724 | Simple Membership < 4.1.1 - Reflected Cross-Site Scripting | 6.1 | |
| High | CVE-2023-41956 | WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability | 8.8 | |
| Critical | CVE-2023-41957 | smp7, wp.insider Simple Membership: Improper Privilege Management | 8.6 | |
| High | CVE-2023-0254 | Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection | 7.2 | |
| High | CVE-2016-10884 | Simple Membership Plugin Simple Membership: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2017-18499 | Simple Membership Plugin Simple Membership: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2023-4719 | Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting | 7.2 | |
| Medium | CVE-2024-1985 | Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting | 4.7 | |
| High | CVE-2024-11088 | Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor | 5.3 | |
| High | CVE-2023-50376 | smp7, wp.insider Simple Membership: Cross-site Scripting | 7.1 | |
| Medium | CVE-2022-0681 | Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF | 6.5 | |
| Medium | CVE-2024-4383 | Simple Membership <= 4.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 6.4 | |
| Medium | CVE-2022-4469 | Simple Membership < 4.2.2 - Contributor+ Stored XSS | 5.4 | |
| Medium | CVE-2023-6882 | Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode | 6.1 | |
| Medium | CVE-2024-3730 | Simple Membership <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 5.4 | |
| Medium | CVE-2022-0328 | Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF | 4.7 | |
| Medium | CVE-2024-49682 | WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability | 4.7 | |
| Medium | CVE-2024-22308 | WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection | 3.4 |
Products
| Simple Membership | 20 | 0 |