WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
memberlite-shortcodes
Published
2025-10-17
Title
Memberlite Shortcodes <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
membermouse
Published
2018-05-27
Title
Membermouse < 2.2.9 - Blind SQL Injection
Slug
memberpress
Published
2024-03-21
Title
Memberpress < 1.11.27 - Reflected Cross-Site Scripting via message and error
Slug
memberpress
Published
2024-05-21
Title
MemberPress < 1.11.30 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode
Slug
memberpress
Published
2024-05-21
Title
MemberPress < 1.11.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter
Slug
memberpress
Published
2024-08-29
Title
MemberPress < 1.11.30 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters
Slug
memberpress
Published
2024-08-26
Title
Memberpress < 1.11.35 - Missing Authorization
Slug
memberpress
Published
2025-04-17
Title
Memberpress < 1.12.0 - Reflected Cross-Site Scripting
Slug
memberpress
Published
2025-04-21
Title
Memberpress < 1.12.0 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
memberpress-downloads
Published
2022-09-19
Title
Memberpress Downloads < 1.2.6 - Subscriber+ Arbitrary File Upload
Slug
members
Published
2024-12-10
Title
Members < 3.2.11 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
members-import
Published
2023-01-03
Title
Members Import <= 1.4.2 - XSS via Imported CSV
Slug
members-list
Published
2022-03-14
Title
Members List < 4.3.7 - Reflected Cross-Site Scripting
Slug
members-page-only-for-logged-in-users
Published
2025-03-11
Title
Members page only for logged in users <= 1.4.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
membership-by-supsystic
Published
2021-02-08
Title
Membership by Supsystic <= 1.5.0 - Authenticated SQL Injection
Slug
membership-for-woocommerce
Published
2023-01-04
Title
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
Slug
membership-for-woocommerce
Published
2025-04-16
Title
Membership For WooCommerce < 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
membership-for-woocommerce
Published
2025-06-09
Title
Membership For WooCommerce < 2.8.2 - Missing Authorization
Slug
membership-for-woocommerce
Published
2025-08-12
Title
Membership For WooCommerce < 3.0.0 - Missing Authorization
Slug
membership-for-woocommerce
Published
2025-12-24
Title
Membership For WooCommerce < 3.0.4 - Unauthenticated Insecure Direct Object Reference
Slug
membership-simplified-for-oap-members-only
Published
2017-03-14
Title
Membership Simplified <= 1.58 - Unauthenticated Arbitrary File Download
Slug
membersonic-lite
Published
2016-06-28
Title
MemberSonic Lite < 1.302 - Authentication Bypass
Slug
memberspace
Published
2024-12-26
Title
MemberSpace – Membership Plugin and Paid Subscriptions < 2.1.14 - Reflected XSS
Slug
memberspace
Published
2025-03-20
Title
MemberSpace < 2.1.14 - Reflected Cross-Site Scripting
Slug
mementor-core
Published
2025-11-10
Title
Mementor Core <= 2.2.5 - Authenticated (Subscriber+) Privilege Escalation