Skip to content
OpenAdvisories

Vendor

wp.insider

15 known vulnerabilities.

Products

Simple Membership 7 Affiliates Manager 4 Simple Membership WP user Import 1 Simple Membership After Login Redirection 1 Payment Gateway for PayPal Pro, PayPal Checkout & Subscriptions for WooCommerce 1 Simple Membership Custom Messages 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2026-127204

    WooCommerce PayPal Pro Payment Gateway < 4.1.1 Payment Bypass via pp_capture_order

    WooCommerce PayPal Pro Payment Gateway plugin before 4.1.1 contains an unauthenticated payment bypass vulnerability that allows remote attackers to mark unpaid orders as paid by exploiting the pp_capture_order AJAX handler, which is gated only by a public che…

    wp.insider Payment Gateway for PayPal Pro, PayPal Checkout & Subscriptions for WooCommerce Web / CMS
  • High 7.1
    CVE-2026-73358

    WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.

    wp.insider Affiliates Manager
  • High 7.5
    CVE-2026-66712

    WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.

    wp.insider Simple Membership
  • High 7.5
    CVE-2026-52692

    WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.

    wp.insider Affiliates Manager
  • High 7.5
    CVE-2026-34886

    WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.

    wp.insider Simple Membership
  • High 7.1
    CVE-2025-24660

    WordPress Simple Membership Custom Messages Plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership Custom Messages simple-membership-custom-messages allows Reflected XSS.This issue affects Simple Membership Custom Messages: fro…

    wp.insider Simple Membership Custom Messages