CVE-2022-0328CWE-352
Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF
published February 28, 2022
What it is
The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00471 · 39.8th percentile
- Weakness
- CWE-352 · Cross-Site Request Forgery (CSRF)
- Published
- 2022-02-28T09:06Z
EPSS history
Timeline