Vulnerabilidades de Tips and Tricks HQ
CVEs publicadas que afetam produtos de Tips and Tricks HQ: 4 registro(s), com severidade, exploração e correções.
CVE-2026-54811
Crítica · 9.3
CWE-89 17/06/2026
WordPress WP eMember plugin < v10.9.4 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.
CVE-2026-49077
Média · 5.3
CWE-497 04/06/2026
WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data.
This issue affects WP eMember: from n/a through v10.2.2.
CVE-2026-28073
Alta · 7.1
CWE-79 19/03/2026
WordPress WP eMember theme <= v10.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ WP eMember allows Reflected XSS.This issue affects WP eMember: from n/a through v10.2.2.
CVE-2026-28070
Média · 5.3
CWE-862 19/03/2026
WordPress WP eMember plugin <= v10.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2.