5.3
Medium
CVE-2026-49077 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP…
Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from n/a through v10.2.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP eMember 10.2 | earliest → 10.2.2 | No fix stated |
Other CVEs of WP eMember
The 4 CVEs of WP eMember →
CVE-2026-54811
Unauthenticated SQL Injection in WP eMember < v10.9.4 versions
9.3
Critical
CVE-2026-28070
Missing Authorization vulnerability in Tips and Tricks HQ WP eMember allows Exploiting Incorrectly Configured Access…
5.3
Medium
CVE-2026-28073
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tips and Tricks HQ…
7.1
High