Skip to contentButlerblog Wp-members vulnerabilities
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile FieldsCVE-2025-144485.4 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout ShortcodeCVE-2024-103746.4 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site ScriptingCVE-2024-92316.1 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-18527.2 High
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-19876.4 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information ExposureCVE-2023-67336.5 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings UpdateCVE-2023-28694.3 Medium
- butlerblog wp-membersThe wp-members plugin before 3.2.8 for WordPress has CSRF.CVE-2019-156608.8 High
- butlerblog wp-membersCross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers...CVE-2017-22226.1 Medium