Read the docs

Liquid Web

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Liquid Web records in CISA KEV

No Liquid Web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Restrict Content · all components

Priority MEDIUM 60

The Membership WordPress plugin before 3.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users su…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-07-17 Fixed in 3.2.3
Priority MEDIUM 42

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcp_stripe_create_setup_intent_for_saved_card' function due to m…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00455 Published 2026-01-16 No fix listed CWE-639
Priority LOW 39

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.13 via the WordPress core search feature.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00462 Published 2025-01-26 No fix listed CWE-200
Open these records in search →