CVE-2022-0681 | BDVDB-2026-172292 Detail

Simple Membership

Description#

The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attack

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)

References#

https://wpscan.com/vulnerability/c5765816-4439-4c14-a847-044248ada0ef

Exploit#

No public exploit known

History#

Version 12022-03-21Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.