WP-Members Membership Plugin

Уязвимости

• CVE-2019-15660без авторизации · нужен клик

  The wp-members plugin before 3.2.8 for WordPress has CSRF.

  Высокий 8.8

• CVE-2025-50051нужен вход≤ 3.5.4

  WordPress WP-Members plugin <= 3.5.4 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2026-2363участник+≤ 3.5.5.1

  WP-Members Membership Plugin <= 3.5.5.1 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute

  Средний 6.5

• CVE-2023-6733участник+≤ 3.4.8

  WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure

  Средний 6.5

• CVE-2025-7495участник+≤ 3.5.4.1

  WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2025-4610участник+≤ 3.5.2

  WP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode

  Средний 6.4

• CVE-2026-84960без авторизации · нужен клик≤ 3.5.6

  WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-9231без авторизации · нужен клик≤ 3.4.9.5

  WP-Members Membership Plugin <= 3.4.9.5 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-1852без авторизации≤ 3.4.9.2

  WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting

  Средний 6.1

• CVE-2017-2222без авторизации · нужен клик

  Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via u

  Средний 6.1

• CVE-2025-57973нужен вход≤ 3.5.4.2

  WordPress WP-Members Plugin <= 3.5.4.2 - Cross Site Scripting (XSS) Vulnerability

  Средний 5.5

• CVE-2025-14448подписчик+≤ 3.5.4.3

  WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields

  Средний 5.4

• CVE-2024-10374участник+≤ 3.4.9.5

  WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode

  Средний 5.4

• CVE-2024-1987участник+≤ 3.4.9.1

  WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 5.4

• CVE-2025-12648без авторизации≤ 3.5.4.4

  WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files

  Средний 5.3

• CVE-2024-2920без авторизации≤ 3.4.9.3

  WP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Files

  Средний 5.3

• CVE-2025-9489подписчик+≤ 3.5.4.2

  WP-Members Membership Plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names

  Средний 5.0

• CVE-2023-2869подписчик+≤ 3.4.7.3

  WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Update

  Средний 4.3