CVE-2017-1002008
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 17%
from disclosure to weapon0 days
Published on NVDSep 14
1st PoCMar 16
exploitation probability
17%top 3% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.
Affected products
William DeAngelis · membership-simplified-for-oap-members-onlypublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/41622/unverifiedexploitdbwww.exploit-db.com/exploits/41622unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.