WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
simple-membership
Published
2022-12-21
Title
Simple Membership < 4.2.2 - Contributor+ Stored XSS
Slug
simple-membership
Published
2023-09-05
Title
Simple Membership < 4.3.6 - Reflected XSS
Slug
simple-membership
Published
2023-09-25
Title
Simple Membership < 4.3.5 - Privilege escalation via Registration
Slug
simple-membership
Published
2023-09-25
Title
Simple Membership < 4.3.5 - Account Takeover via Password Reset
Slug
simple-membership
Published
2023-12-18
Title
Simple Membership < 4.3.9 - Reflected Cross-Site Scripting Vulnerability via environment_mode
Slug
simple-membership
Published
2024-01-19
Title
Simple Membership < 4.4.2 - Open Redirect
Slug
simple-membership
Published
2024-03-05
Title
Simple Membership < 4.4.3 - Unauthenticated Stored Self-Based Cross-Site Scripting
Slug
simple-membership
Published
2024-04-24
Title
Simple Membership < 4.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-membership
Published
2024-05-03
Title
Simple Membership < 4.4.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
simple-membership
Published
2024-10-21
Title
Simple Membership < 4.5.4 - Unauthenticated Open Redirect
Slug
simple-membership
Published
2024-11-20
Title
Simple Membership < 4.5.6 - Exposure of Private Personal Information to an Unauthorized Actor
Slug
simple-membership
Published
2025-06-05
Title
Simple Membership < 4.6.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
simple-membership
Published
2026-02-18
Title
Simple Membership < 4.7.1 - Unauthenticated Improper Handling of Missing Values
Slug
simple-membership
Published
2026-03-31
Title
Simple Membership < 4.7.2 - Missing Authorization
Slug
simple-membership
Published
2026-01-19
Title
Simple Membership < 4.7.0 - Missing Authorization
Slug
simple-membership
Published
2026-06-15
Title
Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version
Slug
simple-membership
Published
2026-06-17
Title
Simple Membership < 4.7.6 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook
Slug
simple-membership
Published
2026-05-03
Title
Simple Membership < 4.7.3 - Unauthenticated Stored Cross-Site Scripting
Slug
simple-membership
Published
2026-07-13
Title
Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification
Slug
simple-membership
Published
2026-07-24
Title
Simple Membership < 4.7.8 - Unauthenticated Administrator Account Takeover via Registration Username Collision
Slug
simple-membership
Published
2026-07-24
Title
Simple Membership < 4.7.8 - Unauthenticated Stored XSS via PayPal Subscription Subscriber Name
Slug
simple-membership
Published
2026-08-05
Title
Simple Membership < 4.7.9 - Missing Authorization
Slug
simple-membership
Published
2026-08-31
Title
Simple Membership < 4.8.2 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding
Slug
simple-membership-after-login-redirection
Published
2024-09-30
Title
Simple Membership After Login Redirection < 1.7 - Open Redirect
Slug
simple-membership-custom-messages
Published
2025-01-18
Title
Simple Membership Custom Messages < 2.5 - Reflected Cross-Site Scripting