WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
members
Published
2026-07-10
Title
Members < 3.2.23 - Unauthenticated Sensitive Information Disclosure via REST API Pagination Side Channel
Slug
members-import
Published
2023-01-03
Title
Members Import <= 1.4.2 - XSS via Imported CSV
Slug
members-list
Published
2022-03-14
Title
Members List < 4.3.7 - Reflected Cross-Site Scripting
Slug
members-page-only-for-logged-in-users
Published
2025-03-11
Title
Members page only for logged in users <= 1.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
membership-by-supsystic
Published
2021-02-08
Title
Membership by Supsystic <= 1.5.0 - Authenticated SQL Injection
Slug
membership-by-supsystic
Published
2026-05-16
Title
Membership by Supsystic <= 1.4.7 - Unauthenticated SQL Injection
Slug
membership-for-woocommerce
Published
2023-01-04
Title
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
Slug
membership-for-woocommerce
Published
2025-04-16
Title
Membership For WooCommerce < 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
membership-for-woocommerce
Published
2025-06-09
Title
Membership For WooCommerce < 2.8.2 - Missing Authorization
Slug
membership-for-woocommerce
Published
2025-08-12
Title
Membership For WooCommerce < 3.0.0 - Missing Authorization
Slug
membership-for-woocommerce
Published
2025-12-24
Title
Membership For WooCommerce < 3.0.4 - Unauthenticated Insecure Direct Object Reference
Slug
membership-for-woocommerce
Published
2026-07-09
Title
Membership For WooCommerce < 3.1.1 - Unauthenticated Arbitrary File Deletion
Slug
membership-for-woocommerce
Published
2026-08-17
Title
Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass
Slug
membership-simplified-for-oap-members-only
Published
2017-03-14
Title
Membership Simplified <= 1.58 - Unauthenticated Arbitrary File Download
Slug
membersonic-lite
Published
2016-06-28
Title
MemberSonic Lite < 1.302 - Authentication Bypass
Slug
memberspace
Published
2024-12-26
Title
MemberSpace – Membership Plugin and Paid Subscriptions < 2.1.14 - Reflected XSS
Slug
memberspace
Published
2025-03-20
Title
MemberSpace < 2.1.14 - Reflected Cross-Site Scripting
Slug
mementor-core
Published
2025-11-10
Title
Mementor Core < 3.0.0 - Authenticated (Subscriber+) Privilege Escalation
Slug
memeone
Published
2025-01-16
Title
MemeOne <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
memorialday
Published
2025-02-17
Title
MemorialDay < 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
memphis-documents-library
Published
2016-03-22
Title
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download
Slug
memphis-documents-library
Published
2015-09-04
Title
Memphis Documents Library < 3.0 - Multiple Issues
Slug
memsource-connector
Published
2026-01-16
Title
Phrase TMS Integration for WordPress < 4.7.6 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
mendeleyplugin
Published
2023-10-18
Title
Mendeley <= 1.3.4 - Admin+ Stored XSS
Slug
mentoring
Published
2026-05-04
Title
Mentoring < 1.2.9 - Unauthenticated Privilege Escalation in mentoring_process_registration