CVE-2017-1002009

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function.

Score

CVSS 3.0 9.8 Critical

Status

Modified - larry0@me.com

Published

2017-09-14

Last modified

2024-09-17

Weaknesses

CWE-89

Affected products

• Membership Simplified (Ontraport)

References

• http://membership.officeautopilot.com/get-it-now/
• http://www.vapidlabs.com/advisory.php?v=188