CVE-2017-1002008 | BDVDB-2026-90490 Detail

William DeAngelismembership-simplified-for-oap-members-only

Description#

Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wordpress.org/plugins/membership-simplified-for-oap-members-only
http://www.vapidlabs.com/advisory.php?v=187
https://www.exploit-db.com/exploits/41622/
https://wpvulndb.com/vulnerabilities/8777

Exploit#

https://www.exploit-db.com/exploits/41622/

History#

Version 12017-09-14Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.