CVE-2019-14328

概要

参考情報

• packetstormsecurity.com/files/153801/WordPress-Simple-Membership-3.8.4-Cross-Site-Request-Forgery.html · Exploit
• wordpress.org/plugins/simple-membership · Release Notes
• wpvulndb.com/vulnerabilities/9482 · Third Party Advisory

simple membership のその他の脆弱性

• CVE-2024-11088高 7.5The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via t…
• CVE-2024-49682中 6.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This iss…
• CVE-2023-41957緊急 9.8Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Memb…
• CVE-2023-41956高 8.8Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4.
• CVE-2024-4383中 5.4The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swpm_paypal_subscription_cancel_li…