NetSight
critical9.8

CVE-2022-2317

The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user sup…

Impact

The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user supplied parameter.

Affected products

VendorProductAffected versions
Simple-Membership-PluginSimple Membership
before 4.1.3

Weakness classification

References