Plugin icon

Wp EMember

wp-eMember

Vulnerabilities:

12

Last Updated:

April 3, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-03-02
Title
Wp EMember <= 10.2.2 - Reflected Cross-Site Scripting
Fixed in
No known fix
CVSS
6.1 (medium)
Published
2024-07-15
Title
WP eMember <= v10.7.0 - Stored XSS via CSRF
Fixed in
Fixed in v10.7.0
CVSS
7.1 (high)
Published
2024-06-22
Title
WP eMember < 10.6.6 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 10.6.6
CVSS
6.6 (medium)
Published
2024-06-22
Title
WP eMember < 10.6.6 - Reflected XSS
Fixed in
Fixed in 10.6.6
CVSS
7.1 (high)
Published
2024-06-22
Title
WP eMember < 10.6.6 - Bulk Delete via CSRF
Fixed in
Fixed in 10.6.6
CVSS
4.3 (medium)
Published
2024-06-22
Title
WP eMember < 10.6.7 - Reflected XSS via Member Edit
Fixed in
Fixed in 10.6.7
CVSS
7.1 (high)
Published
2024-06-22
Title
WP eMember < 10.6.7 - Unauthenticated Stored XSS via Member Registration
Fixed in
Fixed in 10.6.7
CVSS
8.8 (high)
Published
2024-06-22
Title
WP eMember < 10.6.6 - Reflected XSS
Fixed in
Fixed in 10.6.6
CVSS
7.1 (high)
Published
2024-06-22
Title
WP eMember < 10.6.6 - Stored XSS in Blacklist via CSRF
Fixed in
Fixed in 10.6.6
CVSS
7.1 (high)
Published
2024-06-22
Title
WP eMember < 10.6.7 - Reflected XSS
Fixed in
Fixed in 10.6.7
CVSS
4.2 (medium)
Published
2024-05-14
Title
WP eMember < 10.3.9 - Reflected XSS
Fixed in
Fixed in 10.3.9
CVSS
7.1 (high)
Published
2024-05-14
Title
WP eMember < 10.3.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 10.3.9
CVSS
6.1 (medium)