Unknown Membership Plugin vulnerabilities

• unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection CVE-2026-12497 7.5 HighJuly 24, 2026
• unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content ProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR CVE-2026-10820 8.1 HighJune 27, 2026
• unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content, properfraction profilepress +1 more Paid Membership Plugin < 4.15.20 - Admin+ Stored XSS CVE-2024-13121 3.5 LowFebruary 13, 2025
• properfraction profilepress, unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content +1 more ProfilePress < 4.15.20 - Admin+ Stored XSS CVE-2024-13120 4.8 MediumFebruary 13, 2025
• properfraction profilepress, unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content +1 more ProfilePress < 4.15.20 - Admin+ Stored XSS CVE-2024-13119 4.8 MediumFebruary 13, 2025
• properfraction profilepress, unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content +1 more ProfilePress < 4.15.15 - Admin+ Stored XSS CVE-2024-10518 4.8 MediumDecember 12, 2024
• properfraction profilepress, unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content +1 more ProfilePress < 4.15.15 - Admin+ Stored XSS CVE-2024-10517 4.8 MediumDecember 12, 2024
• liquidweb restrict content, unknown membership plugin +1 more Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS CVE-2023-3182 6.1 MediumJuly 17, 2023
• kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more Youzify < 1.2.0 - Unauthenticated SQLi CVE-2022-1950 9.8 CriticalAugust 1, 2022
• armemberplugin armember, reputeinfosystems armember – membership plugin, content restriction, member levels, user profile & user signup +1 more ARMember < 3.4.8 - Unauthenticated Admin Account Takeover CVE-2022-1903 Public exploit 8.1 HighJune 27, 2022
• kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more Youzify < 1.0.7 - Stored Cross-Site Scripting via Biography CVE-2021-24443 5.4 MediumAugust 2, 2021