| CVE-2026-88785 |
The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext…
|
4.7
Moyenne
|
11 oct. 2026 |
| CVE-2026-88764 |
The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal…
|
5.4
Moyenne
|
13 sept. 2026 |
| CVE-2026-14936 |
The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the…
|
5.3
Moyenne
|
6 août 2026 |
| CVE-2026-15931 |
The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an…
|
6.1
Moyenne
|
3 août 2026 |
| CVE-2026-15930 |
The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration…
|
9.4
Critique
|
3 août 2026 |
| CVE-2026-11855 |
The Simple Membership WordPress plugin before 4.7.5 does not verify the authenticity of Stripe webhook requests when…
|
8.8
Élevée
|
6 juil. 2026 |
| CVE-2022-4469 |
The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before…
|
5.4
Moyenne
|
16 janv. 2023 |
| CVE-2022-2317 |
The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due…
|
Non notée
|
1 août 2022 |
| CVE-2022-2273 |
The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when…
|
Non notée
|
1 août 2022 |
| CVE-2022-1724 |
The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting…
|
Non notée
|
13 juin 2022 |
| CVE-2022-0681 |
The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions,…
|
Non notée
|
21 mars 2022 |
| CVE-2022-0328 |
The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which…
|
Non notée
|
28 févr. 2022 |