Skip to content
OpenAdvisories

Vendor

Memberful

5 known vulnerabilities.

Products

Memberful - Membership Plugin 5
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-104401

    WordPress Memberful - Membership Plugin plugin <= 1.81.2 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive Data.This issue affects Memberful - Membership Plugin: from n/a through 1.81.2.

    Memberful Memberful - Membership Plugin
  • Medium 5.3
    CVE-2025-58000

    WordPress Memberful plugin <= 1.75.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in memberful Memberful - Membership Plugin memberful-wp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberful - Membership Plugin: from n/a through <= 1.75.0.

    Memberful Memberful - Membership Plugin
  • Medium 5.3
    CVE-2024-11294

    Memberful <= 1.73.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

    The Memberful plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.73.9 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts th…

    Memberful Memberful - Membership Plugin Web / CMS
  • Medium 6.4
    CVE-2024-9242

    Memberful – Membership Plugin <= 1.73.7 - Authenticated (contributor+) Stored Cross-Site Scripting

    The Memberful – Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'memberful_buy_subscription_link' and 'memberful_podcasts_link' shortcodes in all versions up to, and including, 1.73.7 due to insufficient in…

    Memberful Memberful - Membership Plugin Web / CMS