Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2022-4469 The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before…

Description

The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.

Produits et versions touchés

Produit Versions touchées Corrigé en
Simple Membership 4.2 premières → < 4.2.2 4.2.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Simple Membership

Les 12 CVE de Simple Membership →
CVE-2026-88785 The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext… 4.7 Moyenne CVE-2026-88764 The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal… 5.4 Moyenne CVE-2026-14936 The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the… 5.3 Moyenne CVE-2026-15931 The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an… 6.1 Moyenne
Suivre cette CVE