Skip to content
OpenAdvisories

Vendor

wp.insider

14 known vulnerabilities.

Products

Simple Membership 7 Affiliates Manager 4 Simple Membership WP user Import 1 Simple Membership After Login Redirection 1 Simple Membership Custom Messages 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-74000

    WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

    Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.

    wp.insider Simple Membership
  • Medium 6.5
    CVE-2026-57654

    WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability

    Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.

    wp.insider Affiliates Manager
  • Medium 6.5
    CVE-2026-42663

    WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.

    wp.insider Simple Membership
  • Medium 4.3
    CVE-2026-25308

    WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Membership: from n/a through <= 4.6.9.

    wp.insider Simple Membership
  • Medium 5.4
    CVE-2026-24986

    WordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through <= 1.9.1.

    wp.insider Simple Membership WP user Import
  • Medium 5.9
    CVE-2025-49333

    WordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership simple-membership allows Stored XSS.This issue affects Simple Membership: from n/a through <= 4.6.3.

    wp.insider Simple Membership
  • Medium 4.7
    CVE-2024-49682

    WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through <= 4.5.3.

    wp.insider Simple Membership
  • Medium 4.7
    CVE-2024-47354

    WordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerability

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership After Login Redirection simple-membership-after-login-redirection.This issue affects Simple Membership After Login Redirection: from n/a through <= 1.6.

    wp.insider Simple Membership After Login Redirection