WordPress Plugin Vulnerabilities

Simple Membership < 3.3.3 - Multiple CSRF

Description

The Simple Membership WordPress plugin was affected by a Multiple CSRF security vulnerability.

Affects Plugins

Plugin icon
simple-membership
Fixed in 3.3.3

References

CVE
CVE-2016-10884

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
601c4ba4-585c-4f5d-8426-e483054e5d04

Timeline

Publicly Published
2016-09-16 (about 9 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-12-11
Title
Simple Theme Changer <= 1.0 - Cross-Site Request Forgery to Arbitrary Theme Switcher Configuration Update
Published
2025-07-30
Title
Integrate Google Drive < 1.5.3 - Cross-Site Request Forgery
Published
2023-10-21
Title
Serial Numbers for WooCommerce – License Manager < 1.6.4 - Arbitrary Settings Update via CSRF
Published
2023-11-16
Title
WP EXtra < 6.5 - Cross-Site Request Forgery ToolImport
Published
2024-03-25
Title
Advance Search <= 1.1.6 - Shortcode Deletion via CSRF