Wp.insider vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Wp.insider products: 10 record(s), with severity, exploitation and fixes.

Simple Membership 5 Affiliates Manager 4 Simple Membership WP user Import 1

Exploited only (KEV) →

CVE-2026-74000 Medium · 5.3 CWE-862 Sep 17, 2026

WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.

CVE-2026-73358 High · 7.1 CWE-79 Aug 18, 2026

WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.

CVE-2026-73355 Critical · 9.3 CWE-89 Aug 18, 2026

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.

CVE-2026-66712 High · 7.5 CWE-862 Aug 6, 2026

WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.

CVE-2026-57654 Medium · 6.5 CWE-862 Jun 26, 2026

WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability

Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.

CVE-2026-52692 High · 7.5 CWE-201 Jun 15, 2026

WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.

CVE-2026-42663 Medium · 6.5 CWE-79 Jun 15, 2026

WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.

CVE-2026-34886 High · 7.5 CWE-862 Jun 15, 2026

WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.

CVE-2026-25308 Medium · 4.3 CWE-862 Feb 19, 2026

WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9.

CVE-2026-24986 Medium · 5.4 CWE-352 Feb 3, 2026

WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through <= 1.9.1.