Log out
Get PRO

Latest

Input validation vulnerability in Simple Membership 4.3.4

  • Severity: high-risk
  • Status: Fixed
  • Publication: September 25, 2023

. The Simple Membership plugin for WordPress is a plugin that can be used to create user accounts with different levels of access. Unfortunately, a security flaw was recently discovered in versions up to 4.3.4 of the plugin. This flaw allows unauthenticated users to create user accounts with access levels higher than what was intended. This can lead to users gaining access to areas of the website that they should not have access to. It is important to update the plugin to the latest version in order to prevent this vulnerability.

Detected in:

Simple Membership fixed vulnerable versions: >= * <= 4.3.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.