Detections
Analytics
CVE-2017-1002008
critical
Description
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.
References
https://wpvulndb.com/vulnerabilities/8777
https://wordpress.org/plugins/membership-simplified-for-oap-members-only