CVE Intelligence

Tips and Tricks HQ vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Tips and Tricks HQ products: 4 record(s), with severity, exploitation and fixes.

WP eMember 4

Exploited only (KEV) →

CVE-2026-54811 Critical · 9.3 CWE-89 Jun 17, 2026
WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.
CVE-2026-49077 Medium · 5.3 CWE-497 Jun 4, 2026
WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from n/a through v10.2.2.
CVE-2026-28073 High · 7.1 CWE-79 Mar 19, 2026
WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue affects WP eMember: from n/a through v10.2.2.
CVE-2026-28070 Medium · 5.3 CWE-862 Mar 19, 2026
WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2.