Unknown Simple Membership vulnerabilities

• unknown simple membership Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query String CVE-2026-88785 4.7 MediumOctober 11, 2026
• unknown simple membership Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref CVE-2026-88764 5.4 MediumSeptember 13, 2026
• unknown simple membership mailchimp integration Simple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRF CVE-2026-8151 5.4 MediumSeptember 2, 2026
• unknown simple membership Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification CVE-2026-14936 5.3 MediumAugust 6, 2026
• unknown simple membership Simple Membership < 4.7.8 - Unauthenticated Stored XSS via PayPal Subscription Subscriber Name CVE-2026-15931 6.1 MediumAugust 3, 2026
• unknown simple membership Simple Membership < 4.7.8 - Unauthenticated Administrator Account Takeover via Registration Username Collision CVE-2026-15930 9.4 CriticalAugust 3, 2026
• unknown simple membership Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version CVE-2026-11855 8.8 HighJuly 6, 2026
• simple-membership-plugin simple membership Simple Membership < 4.2.2 - Contributor+ Stored XSS CVE-2022-4469 5.4 MediumJanuary 16, 2023
• simple-membership-plugin simple membership Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation CVE-2022-2317 9.8 CriticalAugust 1, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.3 - Membership Privilege Escalation CVE-2022-2273 8.8 HighAugust 1, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.1 - Reflected Cross-Site Scripting CVE-2022-1724 6.1 MediumJune 13, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF CVE-2022-0681 6.5 MediumMarch 21, 2022
• simple-membership-plugin simple membership Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF CVE-2022-0328 4.7 MediumFebruary 28, 2022