WordPress Plugin Vulnerabilities

Membership Simplified <= 1.58 - Unauthenticated Arbitrary File Download

Description

The plugin is still affected and has been closed.

Affects Plugins

Plugin icon
membership-simplified-for-oap-members-only
No known fix

References

CVE
CVE-2017-1002008
Exploitdb
41622
URL
http://www.vapidlabs.com/advisory.php?v=187

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
6f17645e-f577-4849-9fd8-8ca1e4836f61

Timeline

Publicly Published
2017-03-14 (about 9 years ago)
Added
2017-03-15 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-12-18
Title
Download manager < 3.3.04 - Unauthenticated Download of Password-Protected Files
Published
2024-04-11
Title
ProfilePress < 4.15.5 - Contributor+ Stored Cross-Site Scripting
Published
2014-08-01
Title
Method 2.1 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2014-08-01
Title
Mailing List - Arbitrary file download
Published
2014-08-01
Title
SL User Create 0.2.4 - LSL script Secret String Weakness Information Disclosure