CVE-2017-1002008

Publication date

2017-09-14 13:00:00

Family

larry_cashdollar

State

PUBLISHED

Description

Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.