Not rated
CVE-2022-0681 The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions,…
Description
The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simple Membership 4.1 | earliest → < 4.1.0 | 4.1.0 |
Other CVEs of Simple Membership
The 12 CVEs of Simple Membership →
CVE-2026-88785
The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext…
4.7
Medium
CVE-2026-88764
The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal…
5.4
Medium
CVE-2026-14936
The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the…
5.3
Medium
CVE-2026-15931
The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an…
6.1
Medium