critical9.8Public exploit code
CVE-2017-1002008
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/d…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Membership Simplified 1.58 - Arbitrary File Download2017-03-16 · webapps · php
Impact
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Membership Simplified Project | Membership Simplified | Version 1.58 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.vapidlabs.com/advisory.php?v=187
- https://wordpress.org/plugins/membership-simplified-for-oap-members-only
- https://wpvulndb.com/vulnerabilities/8777
- https://www.exploit-db.com/exploits/41622/
- http://www.vapidlabs.com/advisory.php?v=187
- https://wordpress.org/plugins/membership-simplified-for-oap-members-only
- https://wpvulndb.com/vulnerabilities/8777
- https://www.exploit-db.com/exploits/41622/