Medium
CVE-2024-1985
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 43
Reset filters
Medium
CVE-2024-22308
Simple Membership <= 4.4.1 - Open Redirect
Medium
CVE-2023-50376
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-6882
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode
High
CVE-2023-41956
Simple Membership <= 4.3.4 - Account Takeover via Password Reset
High
CVE-2023-41957
Simple Membership <= 4.3.4 - Privilege escalation via Registration
High
CVE-2023-4719
Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting
High
CVE-2023-0254
Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-4469
Simple Membership <= 4.2.1 - Authenticated (Contributor+) Cross Site Scripting via shortcode
High
CVE-2022-2273
Simple Membership <= 4.1.2 - Membership Privilege Escalation
Critical
CVE-2022-2317
Simple Membership <= 4.1.2 - Membership Privilege Escalation
Medium
CVE-2022-1724
Simple Membership <= 4.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0681
Simple Membership <= 4.0.9 - Cross-Site Request Forgery to Arbitrary Transaction Deletion
High
CVE-2022-0328
Simple Membership <= 4.0.8 - Cross-Site Request Forgery to Arbitrary Member Deletion
High
1664fef3-6416-4678-9ee7-bed2184d7490
Simple Membership <= 4.0.3 - Authenticated (Admin+) SQL Injections
High
CVE-2019-14328
Simple Membership <= 3.8.4 - Cross-Site Request Forgery
Medium
CVE-2017-18499
Simple Membership <= 3.5.6 - Cross-Site Scripting
High
CVE-2016-10884
Simple Membership <= 3.3.2 - Multiple Cross-Site Request Forgery
Medium
95c2038f-c4f9-472a-92ab-59ee395bda3d
Simple Membership < 3.2.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.