Unknown Simple Membership vulnerabilities
12 vulnerabilities
Known vulnerabilities in Unknown Simple Membership, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-2273simple-membership-pluginsimple_membership+2
EPSS score1.18%
The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request.CVE-2022-2317simple-membership-pluginsimple_membership+2EPSS score1.39%
The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user supplied parameter.CVE-2022-1724simple-membership-pluginsimple_membership+2EPSS score1.85%
The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site ScriptingCVE-2022-0681simple-membership-pluginsimple_membership+2EPSS score0.53%
The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attackCVE-2022-0328simple-membership-pluginsimple_membership+2EPSS score0.47%
The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attackCVE-2022-4469simple-membership-pluginsimple_membership+2EPSS score0.53%
The Simple Membership WordPress plugin before 4.2.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.CVE-2026-11855unknownsimple membership+1EPSS score0.51%
The Simple Membership WordPress plugin before 4.7.5 does not verify the authenticity of Stripe webhook requests when no signing secret is configured, nor escape a value taken from them before outputting it in an administrator notice, allowing unauthenticated attackers to inject arbitrary web scripts that execute in the context of a logged-in administrator.CVE-2026-14936unknownsimple membership+1EPSS score0.16%
The Simple Membership WordPress plugin before 4.7.7 does not verify that a PayPal payment notification was sent to the site's own configured merchant account before activating a membership, allowing unauthenticated users to activate or extend a membership using a payment made to an arbitrary PayPal account they control.CVE-2026-15930unknownsimple membership+1EPSS score0.42%
The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, allowing unauthenticated attackers to overwrite the primary administrator's account data (including the email address) and take over that account through the password reset flow.CVE-2026-15931unknownsimple membership+1EPSS score0.27%
The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthenticated payment approval request, nor escape it when displaying it in the administration dashboard, allowing unauthenticated attackers to store arbitrary JavaScript that executes in an administrator's session.CVE-2026-88785unknownsimple membershipEPSS score0.09%
The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able to read them.CVE-2026-88764unknownsimple membership+1EPSS score0.23%
The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid payment button, allowing members to pay for a lower-priced membership while being granted a higher, more privileged membership level.