Vulnerabilidades de Wp.insider
CVEs publicadas que afetam produtos de Wp.insider: 6 registro(s), com severidade, exploração e correções.
CVE-2026-57654
Média · 6.5
CWE-862 26/06/2026
WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability
Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.
CVE-2026-52692
Alta · 7.5
CWE-201 15/06/2026
WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.
CVE-2026-42663
Média · 6.5
CWE-79 15/06/2026
WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.
CVE-2026-34886
Alta · 7.5
CWE-862 15/06/2026
WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.
CVE-2026-25308
Média · 4.3
CWE-862 19/02/2026
WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9.
CVE-2026-24986
Média · 5.4
CWE-352 03/02/2026
WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through <= 1.9.1.