Plugin icon

Memberpress

memberpress

Vulnerabilities:

7

Last Updated:

April 5, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-04-21
Title
Memberpress < 1.12.0 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Fixed in
Fixed in 1.12.0
CVSS
5.3 (medium)
Published
2025-04-17
Title
Memberpress < 1.12.0 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.12.0
CVSS
6.1 (medium)
Published
2024-08-29
Title
MemberPress < 1.11.30 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
Fixed in
Fixed in 1.11.30
CVSS
6.1 (medium)
Published
2024-08-26
Title
Memberpress < 1.11.35 - Missing Authorization
Fixed in
Fixed in 1.11.35
CVSS
5.3 (medium)
Published
2024-05-21
Title
MemberPress < 1.11.30 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
Fixed in
Fixed in 1.11.30
CVSS
8.5 (high)
Published
2024-05-21
Title
MemberPress < 1.11.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
Fixed in
Fixed in 1.11.30
CVSS
6.4 (medium)
Published
2024-03-21
Title
Memberpress < 1.11.27 - Reflected Cross-Site Scripting via message and error
Fixed in
Fixed in 1.11.27
CVSS
6.1 (medium)