Vulnerabilities and Security Researches

Simple Membership, CVE-2022-0328

CVE, Research URL: CVE-2022-0328
Home page URL: Security reports for Simple Membership
Application: Simple Membership
Published on: Feb 28, 2022
Research Description: The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack
Affected versions: max 4.0.9.
Status: vulnerable