Whyun Wpcom Member vulnerabilities

• whyun wpcom member WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback CVE-2026-104803 9.8 CriticalOctober 10, 2026
• whyun wpcom member WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP CVE-2025-14002 8.1 HighDecember 16, 2025
• whyun wpcom member WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode CVE-2025-11920 8.8 HighNovember 1, 2025
• lomu wpcom member WordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion Vulnerability CVE-2025-39570 8.8 HighApril 16, 2025
• whyun wpcom member, wpcom member +1 more WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection CVE-2025-2221 7.5 HighMarch 14, 2025
• whyun wpcom member WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone' CVE-2025-1475 9.8 CriticalMarch 7, 2025
• lomu wpcom member, wpcom member +1 more WordPress WPCOM Member plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-47378 7.1 HighOctober 5, 2024
• whyun wpcom member, wpcom member, wpcom-member +2 more WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta CVE-2024-7493 9.8 CriticalSeptember 6, 2024