MembershipWorks

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

MembershipWorks records in CISA KEV

No MembershipWorks vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-81514 CVE-2026-112355 · GHSA-hvvh-f79h-xxpp

Information disclosure in MembershipWorks WordPress plugin via REST API

MEDIUM 43

The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauthenticated attackers to access member-only content through the WordPress REST API.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00269 Published 2026-10-27 Fixed in 6.17 CWE-862

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0