5.3
Medium
CVE-2026-28070 Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access…
Description
Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP eMember: from n/a through v10.2.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP eMember 10.2 | earliest → 10.2.2 | No fix stated |
Other CVEs of WP eMember
The 4 CVEs of WP eMember →
CVE-2026-54811
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions
9.3
Critical
CVE-2026-49077
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP…
5.3
Medium
CVE-2026-28073
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ…
7.1
High