Skip to content

Known vulnerabilities in wpinsider-1 Simple Membership

Is your version affected?

CVE Summary Score Published
CVE-2026-103427 The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'country' parameter in… 6.4 Medium Oct 10, 2026
CVE-2026-97337 The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive… 7.5 High Oct 3, 2026
CVE-2026-77194 The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account… 5.3 Medium Sep 1, 2026
CVE-2026-12093 The Simple Membership plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,… 5.3 Medium Jun 18, 2026
CVE-2026-1461 The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in all versions up to,… 6.5 Medium Feb 19, 2026
CVE-2024-11088 The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… 5.3 Medium Nov 21, 2024
CVE-2024-4383 The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium May 9, 2024
CVE-2024-3730 The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 5.4 Medium Apr 25, 2024
CVE-2024-1985 The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Display Name' parameter… 4.7 Medium Mar 13, 2024
CVE-2023-6882 The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘environment_mode’… 6.1 Medium Jan 11, 2024
CVE-2023-4719 The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `list_type` parameter… 7.2 High Sep 6, 2023

Other wpinsider-1 products