CVE-2026-88785 in Simple Membership Plugin
요약
\~에 의해 MITRE • 2026. 10. 11.
The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able to read them.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.