Memberful vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Memberful products: 2 record(s), with severity, exploitation and fixes.

Memberful - Membership Plugin 2

Exploited only (KEV) →

CVE-2026-104401 Medium · 4.3 CWE-497 Oct 5, 2026

WordPress Memberful - Membership Plugin plugin <= 1.81.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive Data.This issue affects Memberful - Membership Plugin: from n/a through 1.81.2.

CVE-2026-103067 High · 8.0 CWE-352 Oct 1, 2026

WordPress Memberful - Membership Plugin plugin <= 1.81.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Memberful - Membership Plugin: from n/a through 1.81.0.