TI-2026-51475 CVE-2026-73355 · GHSA-m6xp-8r2q-w62h
WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.
wp.insider
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
wp.insider records in CISA KEVNo wp.insider vulnerabilities are listed in CISA KEV.
Records
13 records
TI-2026-47380 CVE-2026-66712 · GHSA-526w-8v5p-prpw
WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability
Priority LOW 39
Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.
TI-2026-37817 CVE-2026-52692 · GHSA-xffp-qm85-j89r
WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability
Priority LOW 38
Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.
TI-2026-27118 CVE-2026-34886 · GHSA-x67r-jcr7-mf6r
WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability
Priority LOW 38
Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.
TI-2026-51478 CVE-2026-73358 · GHSA-mvhw-5q9j-54qx
WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.
TI-2025-18377 CVE-2025-24660 · GHSA-758x-mffx-rxw8
WordPress Simple Membership Custom Messages Plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership Custom Messages simple-membership-custom-messages allows Reflected XSS.This issue affects…
TI-2026-41479 CVE-2026-57654 · GHSA-8ph7-m94w-6fwc
WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability
Priority LOW 29
Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.
TI-2026-30922 CVE-2026-42663 · GHSA-hc65-h82q-r825
WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.
TI-2025-31381 CVE-2025-49333 · GHSA-p9ph-6ww4-r598
WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability
Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Stored XSS.This issue affects Simple Membership: from n/a throug…
TI-2026-51990 CVE-2026-74000 · GHSA-9hvw-9mqv-7wjm
WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability
Priority LOW 24
Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.
TI-2026-20171 CVE-2026-24986 · GHSA-j9hv-8hcm-6q67
WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 23
Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from…
TI-2024-31672 CVE-2024-47354 · GHSA-x5wp-rg6r-3pmj
WordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability
Priority LOW 22
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirec…
TI-2026-20426 CVE-2026-25308 · GHSA-4234-jpgj-67fv
WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability
Priority LOW 19
Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.…