CVE-2022-2317 — Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation

CVE-2022-2317

Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation PUBLISHED

Description (CNA)

The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user supplied parameter.

Affected (CNA)

Vendor / product	Versions
Unknown / Simple Membership	affected 4.1.3 before 4.1.3

CWE

CWE-269

References

https://wpscan.com/vulnerability/77b7ca19-294c-4480-8f57-6fddfc67fffb

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/77b7ca19-294c-4480-8f57-6fddfc67fffb