WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
member-hero
Published
2022-05-18
Title
Member Hero <= 1.0.9 - Unauthenticated RCE
Slug
memberfindme
Published
2025-11-11
Title
MembershipWorks < 6.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
memberful-wp
Published
2024-10-03
Title
Memberful – Membership Plugin < 1.73.8 - Authenticated (contributor+) Stored Cross-Site Scripting
Slug
memberful-wp
Published
2024-12-16
Title
Memberful < 1.74.0 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
memberful-wp
Published
2025-09-22
Title
Memberful < 1.76.0 - Missing Authorization
Slug
memberlite-shortcodes
Published
2023-10-09
Title
Memberlite Shortcodes < 1.3.9 - Contributor+ Stored XSS via Shortcode
Slug
memberlite-shortcodes
Published
2024-11-22
Title
Memberlite Shortcodes < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion Shortcode
Slug
memberlite-shortcodes
Published
2025-09-16
Title
Memberlite Shortcodes < 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
memberlite-shortcodes
Published
2025-10-17
Title
Memberlite Shortcodes <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
membermouse
Published
2018-05-27
Title
Membermouse < 2.2.9 - Blind SQL Injection
Slug
memberpress
Published
2024-03-21
Title
Memberpress < 1.11.27 - Reflected Cross-Site Scripting via message and error
Slug
memberpress
Published
2024-05-21
Title
MemberPress < 1.11.30 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
Slug
memberpress
Published
2024-05-21
Title
MemberPress < 1.11.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
Slug
memberpress
Published
2024-08-29
Title
MemberPress < 1.11.30 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
Slug
memberpress
Published
2024-08-26
Title
Memberpress < 1.11.35 - Missing Authorization
Slug
memberpress
Published
2025-04-17
Title
Memberpress < 1.12.0 - Reflected Cross-Site Scripting
Slug
memberpress
Published
2025-04-21
Title
Memberpress < 1.12.0 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
memberpress-downloads
Published
2022-09-19
Title
Memberpress Downloads < 1.2.6 - Subscriber+ Arbitrary File Upload
Slug
members
Published
2024-12-10
Title
Members < 3.2.11 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
members-import
Published
2023-01-03
Title
Members Import <= 1.4.2 - XSS via Imported CSV
Slug
members-list
Published
2022-03-14
Title
Members List < 4.3.7 - Reflected Cross-Site Scripting
Slug
members-page-only-for-logged-in-users
Published
2025-03-11
Title
Members page only for logged in users <= 1.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
membership-by-supsystic
Published
2021-02-08
Title
Membership by Supsystic <= 1.5.0 - Authenticated SQL Injection
Slug
membership-for-woocommerce
Published
2023-01-04
Title
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
Slug
membership-for-woocommerce
Published
2025-04-16
Title
Membership For WooCommerce < 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting