CVE-2022-1724

6.1 mediumEPSS 1.8%

Medium (6.1) in simple-membership-plugin simple membership. EPSS 1.8% chance of exploitation in the next 30 days.

The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

simple-membership-plugin:simple_membership

References

https://wpscan.com/vulnerability/96a0a667-9c4b-4ea6-b78a-0681e9a9bbae
https://wpscan.com/vulnerability/96a0a667-9c4b-4ea6-b78a-0681e9a9bbae

Check your stack JSON