CVE-2016-10884

The Simple Membership plugin for WordPress through version 3.3.2 contains multiple CSRF vulnerabilities stemming from inadequate nonce verification. Unauthenticated attackers can exploit these weaknesses to obtain administrative privileges and execute restricted operations if they successfully deceive a site administrator into clicking a malicious link or performing a crafted action.

Based on public CVE data (MITRE/NVD).