CVE-2026-54811 Unauthenticated SQL Injection in WP eMember < v10.9.4 versions

Description

Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.

Affected products and versions

Product	Affected versions	Fixed in
WP eMember 10.9	earliest → < 10.9.4	10.9.4

Other CVEs of WP eMember

The 4 CVEs of WP eMember →

CVE-2026-49077 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP… 5.3 Medium CVE-2026-28070 Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access… 5.3 Medium CVE-2026-28073 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ… 7.1 High