Cbutlerjr vulnerabilities

Products

• Wp-members Membership Plugin 15

Newest

• cbutlerjr wp-members membership plugin WP-Members Membership Plugin <= 3.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field CVE-2026-96565 6.4 MediumNovember 7, 2026
• cbutlerjr wp-members membership plugin WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting CVE-2026-84960 6.1 MediumSeptember 11, 2026
• cbutlerjr wp-members membership plugin WP-Members Membership Plugin <= 3.5.5.1 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute CVE-2026-2363 6.5 MediumMarch 4, 2026
• butlerblog wp-members, cbutlerjr wp-members membership plugin +1 more WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields CVE-2025-14448 5.4 MediumJanuary 15, 2026
• cbutlerjr wp-members membership plugin WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files CVE-2025-12648 5.3 MediumJanuary 7, 2026
• cbutlerjr wp-members membership plugin WP-Members Membership Plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names CVE-2025-9489 5.0 MediumSeptember 9, 2025
• cbutlerjr wp-members membership plugin WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-7495 6.4 MediumJuly 22, 2025
• cbutlerjr wp-members membership plugin WP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode CVE-2025-4610 6.4 MediumMay 17, 2025
• butlerblog wp-members, cbutlerjr wp-members membership plugin +1 more WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode CVE-2024-10374 6.4 MediumOctober 25, 2024
• butlerblog wp-members, cbutlerjr wp-members membership plugin +1 more WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scripting CVE-2024-9231 6.1 MediumOctober 22, 2024
• cbutlerjr wp-members membership plugin WP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Files CVE-2024-2920 5.3 MediumApril 26, 2024
• butlerblog wp-members, cbutlerjr wp-members membership plugin +1 more WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting CVE-2024-1852 7.2 HighApril 9, 2024
• butlerblog wp-members, cbutlerjr wp-members membership plugin +1 more WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-1987 6.4 MediumMarch 8, 2024
• butlerblog wp-members, cbutlerjr wp-members membership plugin +1 more WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure CVE-2023-6733 6.5 MediumJanuary 4, 2024
• butlerblog wp-members, cbutlerjr wp-members membership plugin +1 more WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update CVE-2023-2869 4.3 MediumJuly 12, 2023