Medium severity4.7NVD Advisory· Published Feb 28, 2022· Updated Jun 17, 2026

CVE-2022-0328

Description

The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Simple Membershipcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <4.0.9
Package: https://wordpress.org/plugins/simple-membership

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/44532b7c-4d0d-4959-ada4-733f377d6ec9nvdExploitThird Party Advisory
plugins.trac.wordpress.org/changeset/2662855nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000