CVE-2022-0328

Name of the Vulnerable Software and Affected Versions Simple Membership WordPress plugin versions prior to 4.0.9

Description The issue concerns a lack of CSRF check when deleting members in bulk. This could allow attackers to make a logged-in admin delete members via a CSRF attack.

Recommendations For versions prior to 4.0.9, update to version 4.0.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the bulk member deletion feature until the update is applied.