CVE-2022-2317: Simple-Membership-Plugin Simple Membership

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The Simple Membership WordPress plugin before 4.1.3 allows user to change their membership at the registration stage due to insufficient checking of a user supplied parameter.

Affected products

• Simple-Membership-Plugin Simple Membership: before 4.1.3 (fixed in 4.1.3)

Published 2022-08-01. Last modified 2026-06-17.