CVE Catalog
CVE-2017-1002008
CriticalSummary
The WordPress plugin 'membership-simplified-for-oap-members-only' version 1.58 has a vulnerability that allows file downloads without checking if the user is logged in and has download privileges.
Risk Assessment
The lack of proper user verification may lead to unauthorized access to files, posing a risk of data leakage and privacy violations.
Recommendation
It is recommended to update the plugin to the latest version that includes security fixes and to implement additional user verification mechanisms.
Original NVD description (English source)
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.