Plugin icon

Simple Membership

simple-membership

Vulnerabilities:

23

Last Updated:

March 4, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
Simple Membership < 4.7.1 - Unauthenticated Improper Handling of Missing Values
Fixed in
Fixed in 4.7.1
CVSS
6.5 (medium)
Published
2025-06-05
Title
Simple Membership < 4.6.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.6.4
CVSS
4.4 (medium)
Published
2024-11-20
Title
Simple Membership < 4.5.6 - Exposure of Private Personal Information to an Unauthorized Actor
Fixed in
Fixed in 4.5.6
CVSS
5.3 (medium)
Published
2024-10-21
Title
Simple Membership < 4.5.4 - Unauthenticated Open Redirect
Fixed in
Fixed in 4.5.4
CVSS
6.1 (medium)
Published
2024-05-03
Title
Simple Membership < 4.4.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 4.4.6
CVSS
6.4 (medium)
Published
2024-04-24
Title
Simple Membership < 4.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 4.4.4
CVSS
5.4 (medium)
Published
2024-03-05
Title
Simple Membership < 4.4.3 - Unauthenticated Stored Self-Based Cross-Site Scripting
Fixed in
Fixed in 4.4.3
CVSS
4.7 (medium)
Published
2024-01-19
Title
Simple Membership < 4.4.2 - Open Redirect
Fixed in
Fixed in 4.4.2
CVSS
6.1 (medium)
Published
2023-12-18
Title
Simple Membership < 4.3.9 - Reflected Cross-Site Scripting Vulnerability via environment_mode
Fixed in
Fixed in 4.3.9
CVSS
6.1 (medium)
Published
2023-09-25
Title
Simple Membership < 4.3.5 - Privilege escalation via Registration
Fixed in
Fixed in 4.3.5
CVSS
7.3 (high)
Published
2023-09-25
Title
Simple Membership < 4.3.5 - Account Takeover via Password Reset
Fixed in
Fixed in 4.3.5
CVSS
8.8 (high)
Published
2023-09-05
Title
Simple Membership < 4.3.6 - Reflected XSS
Fixed in
Fixed in 4.3.6
CVSS
7.2 (high)
Published
2022-12-21
Title
Simple Membership < 4.2.2 - Contributor+ Stored XSS
Fixed in
Fixed in 4.2.2
CVSS
6.8 (medium)
Published
2022-07-06
Title
Simple Membership < 4.1.3 - Membership Privilege Escalation
Fixed in
Fixed in 4.1.3
CVSS
4.6 (medium)
Published
2022-07-06
Title
Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation
Fixed in
Fixed in 4.1.3
CVSS
6.5 (medium)
Published
2022-05-23
Title
Simple Membership < 4.1.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.1.1
CVSS
6.1 (medium)
Published
2022-02-25
Title
Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF
Fixed in
Fixed in 4.1.0
CVSS
5.4 (medium)
Published
2022-01-25
Title
Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF
Fixed in
Fixed in 4.0.9
CVSS
5.4 (medium)
Published
2021-04-05
Title
Simple Membership < 4.0.4 - Authenticated SQL Injections
Fixed in
Fixed in 4.0.4
CVSS
9.0 (critical)
Published
2019-07-27
Title
Simple Membership <= 3.8.4 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 3.8.5
CVSS
8.8 (high)
Published
2017-11-08
Title
Simple Membership < 3.5.7 - XSS
Fixed in
Fixed in 3.5.7
CVSS
6.1 (medium)
Published
2016-09-16
Title
Simple Membership < 3.3.3 - Multiple CSRF
Fixed in
Fixed in 3.3.3
CVSS
8.8 (high)
Published
2016-07-14
Title
Simple Membership <= 3.2.8 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.2.9
CVSS
n/a