Skip to contentCbutlerjr Wp-members Membership Plugin vulnerabilities
- cbutlerjr wp-members membership pluginWP-Members Membership Plugin <= 3.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect FieldCVE-2026-965656.4 Medium
- cbutlerjr wp-members membership pluginWP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site ScriptingCVE-2026-849606.1 Medium
- cbutlerjr wp-members membership pluginWP-Members Membership Plugin <= 3.5.5.1 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode AttributeCVE-2026-23636.5 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile FieldsCVE-2025-144485.4 Medium
- cbutlerjr wp-members membership pluginWP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected FilesCVE-2025-126485.3 Medium
- cbutlerjr wp-members membership pluginWP-Members Membership Plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile NamesCVE-2025-94895.0 Medium
- cbutlerjr wp-members membership pluginWP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-74956.4 Medium
- cbutlerjr wp-members membership pluginWP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships ShortcodeCVE-2025-46106.4 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout ShortcodeCVE-2024-103746.4 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site ScriptingCVE-2024-92316.1 Medium
- cbutlerjr wp-members membership pluginWP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive FilesCVE-2024-29205.3 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-18527.2 High
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-19876.4 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information ExposureCVE-2023-67336.5 Medium
- butlerblog wp-members, cbutlerjr wp-members membership plugin +1 moreWP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings UpdateCVE-2023-28694.3 Medium