Simple Membership Plugin For WordPress < 4.1.3 Multiple Vulnerabilities

The WordPress Simple Member Plugin installed on the remote host is affected by multiple vulnerabilities as follows:

• A privilege escalation flaw due to insufficient validation on the membership level_identifier supplied, which permits unauthenticated attackers to supply arbitrary membership levels and be granted these permissions (CVE-2022-2317). - A privilege escalation flaw due to insufficient validation on the membership membership_level supplied, which permits authenticated attackers to supply arbitrary membership levels and be granted these permissions (CVE-2022-2273).

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.