CyberRota Analysis
AI-GeneratedThe Simple Membership plugin for WordPress prior to version 4.7.8 is vulnerable due to inadequate validation of membership levels in PayPal payment notifications, which could allow users to exploit this flaw by paying for a lower-priced membership while gaining access to higher-privileged levels. This could lead to unauthorized access and potential misuse of premium features. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of privilege escalation.
Original NVD Description
The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid payment button, allowing members to pay for a lower-priced membership while being granted a higher, more privileged membership level.