Critical severity9.8NVD Advisory· Published Sep 14, 2017· Updated May 13, 2026
CVE-2017-1002010
CVE-2017-1002010
Description
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete_media function.
Affected products
2unspecified+ 1 more
- (no CPE)range: unspecified
- cpe:2.3:a:ontraport:membership_simplified:1.58:*:*:*:*:wordpress:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.vapidlabs.com/advisory.phpnvdExploitPatchThird Party Advisory
- membership.officeautopilot.com/get-it-now/nvdNot Applicable
News mentions
0No linked articles in our index yet.