description: Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for-oap-members-only/download.php does not check whether a user is logged in and has download privileges.
problem types: Path Traversal
affected:
{
product: membership-simplified-for-oap-members-only
vendor: William DeAngelis
versions:
lessThan: 1.58, status: affected, version: unspecified, versionType: custom
}