CWE Code: 434
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Unrestricted Upload of File with Dangerous Type
Summary: vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, the file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-09-14
Last Modified Date: 2017-09-27