CVE-2022-2273 - Simple-membership-plugin Simple Membership
Critical 8.8
The Simple Membership WordPress plugin before 4.1.3 does not properly validate the membership_level parameter when editing a profile, allowing members to escalate to a higher membership level by using a crafted POST request.
Affected software
Simple-membership-plugin Simple Membership