Approved changes feed: RSS · Atom

cpe:2.3:a:wpswings:membership_for_woocommerce:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWpswings (325d4910-7fb8-5524-97f5-2fb5d0fe400a)
ProductMembership For Woocommerce (7cf68cb6-e143-5cfd-9202-9629e218bace)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpswings/membership-for-woocommerce purl2cpe 2026-06-01 10:16:33.698875

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4395 vulnerable 2026-06-03 14:48:35.641041 Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.
Published: 2023-01-30T20:31:42.219Z
Updated: 2025-03-27T19:55:55.299Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.