Jet Infosystems

**Name of the Vulnerable Software and Affected Versions** Simple Membership WordPress plugin versions prior to 4.1.3 **Description** The issue arises from improper validation of the `membership level` parameter when editing a profile. This allows members to potentially escalate to a higher membership level by crafting a specific POST request. **Recommendations** For versions prior to 4.1.3, update to version 4.1.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Simple Membership WordPress plugin versions prior to 4.1.3 **Description** The issue allows a user to change their membership at the registration stage due to insufficient checking of a user-supplied parameter. **Recommendations** For versions prior to 4.1.3, update to version 4.1.3 or later to resolve the issue.