Plugin icon

Membership Plugin – Kadence Memberships

restrict-content

Vulnerabilities:

11

Last Updated:

May 12, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
Membership Plugin – Restrict Content < 3.2.23 - Missing Authorization
Fixed in
Fixed in 3.2.23
CVSS
5.3 (medium)
Published
2026-03-19
Title
Membership Plugin – Restrict Content < 3.2.25 - Unvalidated Redirect in Password Reset Flow
Fixed in
Fixed in 3.2.25
CVSS
4.3 (medium)
Published
2026-03-04
Title
Membership Plugin – Restrict Content < 3.2.21 - Unauthenticated Privilege Escalation via 'rcp_level'
Fixed in
Fixed in 3.2.21
CVSS
8.1 (high)
Published
2026-02-17
Title
Membership Plugin – Restrict Content < 3.2.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings
Fixed in
Fixed in 3.2.19
CVSS
4.4 (medium)
Published
2026-01-15
Title
Membership Plugin – Restrict Content < 3.2.17 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure
Fixed in
Fixed in 3.2.17
CVSS
8.2 (high)
Published
2025-12-22
Title
Membership Plugin – Restrict Content < 3.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Fixed in
Fixed in 3.2.16
CVSS
6.4 (medium)
Published
2025-01-25
Title
Membership Plugin – Restrict Content < 3.2.14 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Fixed in
Fixed in 3.2.14
CVSS
5.3 (medium)
Published
2024-04-10
Title
Restrict Content < 3.2.9 - Missing Authorization
Fixed in
Fixed in 3.2.9
CVSS
5.3 (medium)
Published
2023-11-06
Title
Restrict Content < 3.2.8 - Information Exposure via legacy log file
Fixed in
Fixed in 3.2.8
CVSS
5.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.2.5
CVSS
6.1 (medium)
Published
2023-06-26
Title
Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
Fixed in
Fixed in 3.2.3
CVSS
7.1 (high)