Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Membership For WooCommerce – Add Simple Membership Plans, Recurring Revenue, Product Tags & Send Emails To Members with WooCommerce Membership 2.1.6

  • Severity: critical
  • Status: Fixed
  • Publication: January 4, 2023

The Membership For WooCommerce plugin for WordPress is not secure in versions up to and including 2.1.6. This means that unauthenticated people can upload files to the affected website’s server. These files could allow the unauthenticated people to execute code remotely

Detected in:

Membership For WooCommerce – Add Simple Membership Plans, Recurring Revenue, Product Tags & Send Emails To Members with WooCommerce Membership fixed vulnerable versions: >= * <= 2.1.6
Membership For WooCommerce – Manage Members, Restrict Content, Create Unlimited Levels, and Subscription Options fixed vulnerable versions:
Membership For WooCommerce – Sell Membership Plans, Restrict Content & Build Online Communities fixed vulnerable versions:
Membership For WooCommerce – SIMPLE MEMBERSHIP PLANS, RECURRING REVENUE, USER PROFILES & SIGNUPS, CONTENT RESTRICTIONS, AND MEMBER LEVELS WITH WOOCOMMERCE MEMBERSHIP fixed vulnerable versions:
Membership For WooCommerce – WordPress Membership Plugin, Restrict Content, Build Online Communities, Paywall & Content Dripping fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.