| Package | Affected versions | Patched versions |
|---|---|---|
| simple membership | < 4.1.3 | 4.1.3 |
The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free