Vulnerabilities

TI-2026-51990 CVE-2026-74000 · GHSA-9hvw-9mqv-7wjm

WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

LOW 24

Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2026-09-17 No fix listed CWE-862

TI-2026-51478 CVE-2026-73358 · GHSA-mvhw-5q9j-54qx

WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-18 No fix listed CWE-79

TI-2026-51475 CVE-2026-73355 · GHSA-m6xp-8r2q-w62h

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-18 No fix listed CWE-89

TI-2026-47380 CVE-2026-66712 · GHSA-526w-8v5p-prpw

WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability

LOW 39

Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-08-06 No fix listed CWE-862

TI-2026-41479 CVE-2026-57654 · GHSA-8ph7-m94w-6fwc

WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability

LOW 29

Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00299 Published 2026-06-26 No fix listed CWE-862

TI-2026-37817 CVE-2026-52692 · GHSA-xffp-qm85-j89r

WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability

LOW 38

Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00238 Published 2026-06-15 No fix listed CWE-201

TI-2026-30922 CVE-2026-42663 · GHSA-hc65-h82q-r825

WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability

LOW 28

Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00161 Published 2026-06-15 No fix listed CWE-79

TI-2026-27118 CVE-2026-34886 · GHSA-x67r-jcr7-mf6r

WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability

LOW 38

Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00251 Published 2026-06-15 No fix listed CWE-862

TI-2026-20426 CVE-2026-25308 · GHSA-4234-jpgj-67fv

WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-02-19 No fix listed CWE-862

TI-2026-20171 CVE-2026-24986 · GHSA-j9hv-8hcm-6q67

WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00116 Published 2026-02-03 No fix listed CWE-352

TI-2025-31381 CVE-2025-49333 · GHSA-p9ph-6ww4-r598

WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Stored XSS.This issue affects Simple Membership: from n/a throug…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00223 Published 2025-06-06 No fix listed CWE-79

TI-2025-18377 CVE-2025-24660 · GHSA-758x-mffx-rxw8

WordPress Simple Membership Custom Messages Plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership Custom Messages simple-membership-custom-messages allows Reflected XSS.This issue affects…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00315 Published 2025-02-03 No fix listed CWE-79

TI-2024-31672 CVE-2024-47354 · GHSA-x5wp-rg6r-3pmj

WordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability

LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirec…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00332 Published 2024-10-10 No fix listed CWE-601

Vulnerabilities

Filters