Extension WordPress
Vulnérabilités Membership Simplified
Cette page rassemble les failles publiées pour Membership Simplified, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Membership Simplified
3 fiches
Membership Simplified <= 1.58 – SQL Injection
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function.
*-1.58
Non indiqué
17/03/2017
Membership Simplified <= 1.58 Beta – SQL Injection
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete_media function.
[*, 1.58)
1.58
17/03/2017
Membership Simplified <= 1.58 – Arbitrary File Download
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.
*-1.58
Non indiqué
13/03/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.