Wpinsider-1 vulnerabilities

Products

• Simple Membership 34

Newest

• unknown simple membership Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query String CVE-2026-88785 4.7 MediumOctober 11, 2026
• wpinsider-1 simple membership Simple Membership <= 4.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Country Field CVE-2026-103427 6.4 MediumOctober 10, 2026
• wpinsider-1 simple membership Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation Endpoints CVE-2026-97337 7.5 HighOctober 3, 2026
• wp.insider simple membership WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability CVE-2026-74000 5.3 MediumSeptember 17, 2026
• unknown simple membership Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref CVE-2026-88764 5.4 MediumSeptember 13, 2026
• wpinsider-1 simple membership Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding CVE-2026-77194 5.3 MediumSeptember 1, 2026
• unknown simple membership Simple Membership < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification CVE-2026-14936 5.3 MediumAugust 6, 2026
• wp.insider simple membership WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability CVE-2026-66712 7.5 HighAugust 6, 2026
• unknown simple membership Simple Membership < 4.7.8 - Unauthenticated Stored XSS via PayPal Subscription Subscriber Name CVE-2026-15931 6.1 MediumAugust 3, 2026
• unknown simple membership Simple Membership < 4.7.8 - Unauthenticated Administrator Account Takeover via Registration Username Collision CVE-2026-15930 9.4 CriticalAugust 3, 2026
• unknown simple membership Simple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API Version CVE-2026-11855 8.8 HighJuly 6, 2026
• wpinsider-1 simple membership Simple Membership <= 4.7.5 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook CVE-2026-12093 5.3 MediumJune 18, 2026
• wp.insider simple membership WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-42663 6.5 MediumJune 15, 2026
• wp.insider simple membership WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability CVE-2026-34886 7.5 HighJune 15, 2026
• wpinsider-1 simple membership Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values CVE-2026-1461 6.5 MediumFebruary 19, 2026
• wp.insider simple membership WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability CVE-2026-25308 4.3 MediumFebruary 19, 2026
• wp.insider simple membership WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49333 5.9 MediumJune 6, 2025
• mra13 simple membership Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor CVE-2024-11088 5.3 MediumNovember 21, 2024
• simple-membership-plugin simple membership WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability CVE-2024-49682 4.7 MediumOctober 24, 2024
• simple-membership-plugin simple membership WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability CVE-2023-41957 8.6 HighMay 17, 2024
• simple-membership-plugin simple membership WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability CVE-2023-41956 8.8 HighMay 17, 2024
• simple-membership-plugin simple membership Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-4383 6.4 MediumMay 9, 2024
• simple-membership-plugin simple membership Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-3730 5.4 MediumApril 25, 2024
• simple-membership-plugin simple membership Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting CVE-2024-1985 4.7 MediumMarch 13, 2024
• mra13 affiliates manager Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery CVE-2024-0859 4.3 MediumFebruary 5, 2024
• simple-membership-plugin simple membership WordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection CVE-2024-22308 3.4 LowJanuary 24, 2024
• simple-membership-plugin simple membership Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode CVE-2023-6882 6.1 MediumJanuary 11, 2024
• simple-membership-plugin simple membership WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS) CVE-2023-50376 7.1 HighDecember 19, 2023
• simple-membership-plugin simple membership Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting CVE-2023-4719 7.2 HighSeptember 6, 2023
• simple-membership-plugin simple membership Simple Membership < 4.2.2 - Contributor+ Stored XSS CVE-2022-4469 5.4 MediumJanuary 16, 2023
• simple-membership-plugin simple membership wp user import Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection CVE-2023-0254 7.2 HighJanuary 12, 2023
• simple-membership-plugin simple membership Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation CVE-2022-2317 9.8 CriticalAugust 1, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.3 - Membership Privilege Escalation CVE-2022-2273 8.8 HighAugust 1, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.1 - Reflected Cross-Site Scripting CVE-2022-1724 6.1 MediumJune 13, 2022
• simple-membership-plugin simple membership Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF CVE-2022-0681 6.5 MediumMarch 21, 2022
• simple-membership-plugin simple membership Simple Membership < 4.0.9 - Arbitrary Member Deletion via CSRF CVE-2022-0328 4.7 MediumFebruary 28, 2022