| |
Vulnerability CVE-2022-2273
Published: 2022-08-01
| Description: |
The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request. |
Type:
CWE-269 (Improper Privilege Management)
References: |
https://wpscan.com/vulnerability/724729d9-1c4a-485c-9c90-a27664c47c84
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
