CVE Intelligence

Wp.insider Simple Membership vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Wp.insider Simple Membership: 5 record(s), with affected versions and fixes.

CVE-2026-74000 Medium · 5.3 CWE-862 Sep 17, 2026
WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability
Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.
CVE-2026-66712 High · 7.5 CWE-862 Aug 6, 2026
WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.
CVE-2026-42663 Medium · 6.5 CWE-79 Jun 15, 2026
WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.
CVE-2026-34886 High · 7.5 CWE-862 Jun 15, 2026
WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.
CVE-2026-25308 Medium · 4.3 CWE-862 Feb 19, 2026
WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9.