← CVE Intelligence

CVE-2022-2273

Simple Membership < 4.1.3 - Membership Privilege Escalation PUBLISHED

Description (CNA)

The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request.

Affected (CNA)

Vendor / productVersions
Unknown / Simple Membershipaffected 4.1.3 before 4.1.3

CWE

CWE-269

References

ADP enrichment

CVE

No English description supplied.