TI-2025-20844 CVE-2025-28901 · GHSA-mwr9-w823-pvwp
WordPress Members page only for logged in users plugin <= 1.4.2 - CSRF to Stored XSS vulnerability
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Naren Members page only for logged in users members-page-only-for-logged-in-users allows Stored XSS.This issue affects Members page only for logged in users: from n/a th…