CVE-2022-2273

Simple Membership < 4.1.3 - Membership Privilege Escalation

State: Published
Severity: Not scored
Published: Aug 1, 2022
Updated: Aug 3, 2024
Reserved: Jun 30, 2022

Description

The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request.

Scores

The record has no CVSS score.

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
Simple MembershipUnknown	4.1.3 to before 4.1.3Affected

References

https://wpscan.com/vulnerability/724729d9-1c4a-485c-9c90-a27664c47c84

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.